Woofun AI reports that on-chain analyst Specter identified the address behind the BONK governance attack as belonging to the founders of Realms and Crypto Notte. The attackers utilized addresses starting with 8xxRd to create malicious proposals, while voting through wallets beginning with CyEE7 and FQnQYa.

Funds flowed into a Binance-associated address (starting with 8rYQBE), suspected to be linked to CyEE7, from wallets 5zvDd3 and 6MPyZ. The 6MPyZ address is publicly associated with Crypto Notte on X Corp.

Meanwhile, 5zvDd3 was the first voter in a January 2023 Realms DAO game test, receiving 1 DEANS token from the project.