How much was stolen in the BonkDAO hack?

DeFiLlama reports $20M stolen from BonkDAO on solana.

Who was hit in the BonkDAO hack?

BonkDAO, on solana, on July 6, 2026. Attack type: contract exploit.

Where did the BonkDAO funds go?

Not established. ChainHint's trace of this incident is incomplete: 6 of the 46 addresses it reached could not be read, so it states no traced figure and no destination until a re-trace reads them all.

Recent hacks/BonkDAO

BonkDAO Hack:$20M Stolen

July 6, 2026 · Solana

Reported by DeFiLlama

As of 2026-10-29 14:20 UTC. These are the feed's figures, not ChainHint's. A freshly reported incident is an unverified third-party claim and the numbers move.

Estimated Loss$20M

ChainSolana

DateJuly 6, 2026

Attack typeContract exploit

Attacker address

Verified by ChainHint · 2026-09-18

9bxWkNf3BtJ6iehq9KbX9uCWMjem4TFiPZ19T2sYJHvQ

On-chain check: solana getTransaction: ok, 2026-07-06 08:26:28 UTC; BONK (DezX…B263) −4,426,104,450,306 from the treasury-owned account, +4,426,104,450,306 to 9bxWkNf3…JHvQ — rekt's '4.426 trillion BONK'

Exploit transaction: 5tPU1srcRc…KV5mWw8P

Sources: rekt.news

Governance capture (BIP #76 passed with bought votes); the address is the one that received the treasury. Proposal creator 8xxR…ycVo and voter CyEE…typQ are related, not listed as the attacker here.

Traced by ChainHint

Trace incomplete — 6 of 46 addresses could not be read

ChainHint's trace reached 46 addresses and could not read the transfer history of 6 of them: a data provider did not answer. Whatever those addresses sent is missing from the trace, so it states no traced figure and no destinations until a re-trace reads every address. A gap in the trace is not evidence that the funds stopped.

In ChainHint's incident archive

No earlier incident at BonkDAO is recorded in our archive.

Contract exploit — 16 incidents of this kind in the 90 days before this page was built, $232M in total, among the incidents ChainHint lists.

BonkDAO hack: the facts

How much was stolen in the BonkDAO hack?: DeFiLlama reports $20M stolen from BonkDAO on solana.
Who was hit in the BonkDAO hack?: BonkDAO, on solana, on July 6, 2026. Attack type: contract exploit.
Where did the BonkDAO funds go?: Not established. ChainHint's trace of this incident is incomplete: 6 of the 46 addresses it reached could not be read, so it states no traced figure and no destination until a re-trace reads them all.

Related hacks

All hacks →

Investigate your own incident

Trace the path of funds across 12 chains on public blockchain data.