An attacker has stolen $21.2 million from the BonkDAO treasury without hacking anything. He purchased $BONK tokens for $4.4 million, proposed via the governance forum that nobody checked for seven days. He voted yes for the proposal with his own tokens, and watched the funds move to his wallet automatically. Once executed, it was irreversible.
coingape.com