Someone Stole $21M From BonkDAO Without Hacking Anything

An attacker has stolen $21.2 million from the BonkDAO treasury without hacking anything. He purchased BONK tokens for $4.4 million, proposed via the governance forum that nobody checked for seven days. He voted yes for the proposal with his own tokens, and watched the funds move to his wallet automatically. Once executed, it was irreversible.