$20M stolen from BonkDAO: attacker bought voting quorum and approved own transfer

Around 4.43 trillion BONK tokens worth nearly $20 million were drained from the BonkDAO treasury on Monday. The attacker exploited no code vulnerability and stole no private keys; instead, they submitted a transfer proposal, bought enough tokens to reach the voting quorum, and voted it through single-handedly. The protocol executed the transfer automatically, as the DAO's rules required.