Immunefi indicated that a recent incident involving BonkDAO highlights a troubling shift in how digital assets are being compromised. An individual invested approximately $4 million to acquire sufficient voting power, enabling the passage of a malicious governance proposal during a period of limited participant engagement.

This allowed the extraction of around $20 million from the protocol’s treasury.

Critically, the underlying smart contracts functioned precisely as designed; the vulnerability resided entirely in the governance framework itself, where low turnout made influence relatively inexpensive to purchase.

A similar pattern emerged earlier in the year with Humanity Protocol, which suffered losses exceeding $30 million.

In…