
BonkDAO Hack:$20M Stolen
July 6, 2026 · Solana
Reported by DeFiLlama
As of 2026-10-11 14:31 UTC. These are the feed's figures, not ChainHint's. A freshly reported incident is an unverified third-party claim and the numbers move.
Attacker address
9bxWkNf3BtJ6iehq9KbX9uCWMjem4TFiPZ19T2sYJHvQ
On-chain check: solana getTransaction: ok, 2026-07-06 08:26:28 UTC; BONK (DezX…B263) −4,426,104,450,306 from the treasury-owned account, +4,426,104,450,306 to 9bxWkNf3…JHvQ — rekt's '4.426 trillion BONK'
Exploit transaction: 5tPU1srcRc…KV5mWw8P
Sources: rekt.news
Governance capture (BIP #76 passed with bought votes); the address is the one that received the treasury. Proposal creator 8xxR…ycVo and voter CyEE…typQ are related, not listed as the attacker here.
Traced by ChainHint — Traced Outflow
$13.8Mreached 45 endpoints
75 nodes · 134 edges
Largest destinations: binance, coinbase, xstocks, mexc, orca — as labelled in our database; not all of these labels are verified.
In ChainHint's incident archive
No earlier incident at BonkDAO is recorded in our archive.
Contract exploit — 16 incidents of this kind in the 90 days before this page was built, $247M in total, among the incidents ChainHint lists.
BonkDAO hack: the facts
- How much was stolen in the BonkDAO hack?
- DeFiLlama reports $20M stolen from BonkDAO on solana.
- Who was hit in the BonkDAO hack?
- BonkDAO, on solana, on July 6, 2026. Attack type: contract exploit.
- Where did the BonkDAO funds go?
- ChainHint traced $13.8M to 45 endpoints, including binance, coinbase, xstocks (as labelled; not all labels are verified).
Related hacks
All hacks →
AquiferContract exploit · also on Solana · August 31, 2026$2.47M
Allbridge CoreContract exploit · also on Solana · July 19, 2026$1.65M
Raydium AMMContract exploit · also on Solana · June 10, 2026$1.34M
Drift TradeContract exploit · also on Solana · April 1, 2026$295M
AstroportContract exploit · September 22, 2026$4.9M
Investigate your own incident
Trace the path of funds across 12 chains on public blockchain data.