BonkDAO said a malicious governance proposal drained about $20M in BONK from its treasury, sending the token lower and putting DAO voting controls under scrutiny.