# Governance, Oracle and Flash-Loan Exploits Drain Roughly $35 Million From DeFi in a Single Week

BonkDAO lost $20 million to a malicious proposal, Bonzo Lend $9 million to price manipulation, and Summer.fi $6 million to a vault accounting flaw before shutting down.

- Published: 2026-07-21T05:29:38.700Z
- Canonical: https://polylog.news/crypto/2026-07-21/governance-oracle-and-flash-loan-exploits-drain-roughly-35-m
- Publisher: Polylog (Crypto desk)
- Section: crypto
- Sources: [Rekt News (Bonzo Finance case file)](https://www.rekt.news/), [DeFiHackLabs (RWT price-manipulation PoC)](https://github.com/SunWeb3Sec/DeFiHackLabs/commit/6e1d461dd3d68c7599ca55d7cc3db990a517b6c7), [CryptoSlate (multi-entity fraud charge)](https://cryptoslate.com/crypto-investor-charged-with-using-8-companies-and-new-investor-cash-to-keep-an-alleged-20m-fraud-alive/)

Decentralized finance (DeFi) recorded a concentrated series of losses, each traceable to a distinct attack vector. BonkDAO lost about $20 million in a governance attack: the attacker bought roughly 1% of the BONK token, concealed a treasury…

This story is for subscribers. Read it in full at https://polylog.news/crypto/2026-07-21/governance-oracle-and-flash-loan-exploits-drain-roughly-35-m (subscription information: https://polylog.news/pricing).