Skip to content
- Bonk.fun website hacked after attackers deploy malicious wallet drainer on domain
- Hackers hijack Bonk team account to launch phishing attack targeting users
- Crypto phishing attacks surge as scams reached $17 billion globally
A sudden security alert shook Solana’s memecoin ecosystem after Bonk. fun lost control of its official website earlier Wednesday. The platform warned users not to interact with the domain until engineers secured access, with the alert posted on the project’s official X account as concerns quickly spread across the community.
Bonk. Fun is a memecoin launchpad that uses the Solana network. It enables users to generate tokens and trade them using on-command bonding curve algorithms. The service will also provide automatic liquidity and include token buybacks and burns based on activity in the BONK ecosystem. Nevertheless, there was a severe incident with the platform when hackers entered the official domain infrastructure. The attack enabled the rogue party to install a wallet-draining system on unsuspecting visitors.
Developers quickly responded by alerting users and isolating the compromised domain. The site recommended that no one interact with the site while the team examined the case.
Also Read: South Korea Crypto Scandal Deepens After Wallet Leak Shock
Platform Warns Users After Domain Compromise
An official Bonk. fun account has also posted a forceful alert, right after the unauthorized activity was realized. The message stated that users had been alerted that rogue players had temporarily occupied the domain. Consequently, the team recommended that the community have no contact with the site.
In addition to warning users, developers began examining the cause of the breach. Engineers tried to make the domain infrastructure controllable and avoid further exposure. These measures helped limit the harm that could have been caused by the attack.
Notably, preliminary analyses showed that the malicious activity targeted a limited number of users. During the incident, only people who were exposed to a wallet were affected, in case they had accepted a suspicious terms-of-service message.
Hijacked Team Account Used to Deploy Malicious Wallet Drainer
More information was disclosed based on the operator’s social media posts. Attackers first breached a team account, according to X user Tom, aka SolportTom, who is the operator of Bonk. Such access enabled them to inject the malicious drainer into the official domain.
According to Tom, the exploit relied on social engineering rather than a vulnerability in a core platform. The visitors were presented with a bogus terms-of-service warning that was intended to look real. Anyone who took the message without realizing it authorized a transaction that stole money from their wallet.
Fortunately, the team noticed something out of the ordinary not long after the site was compromised. Programmers then rushed to their computers to restore the system and eliminate the viruses.
Rising Wave of Phishing Attacks Targets Crypto Platforms
In the meantime, the event is indicative of a broader trend in the cryptocurrency industry. Cyberspace attackers are using phishing and domain-snatching rather than traditional technical exploits. These techniques rely on trust and familiarity with the interface rather than on software vulnerabilities.
Industry statistics show the extent to which these scams are common. A Chainalysis study estimated that crypto scam losses reached approximately $17 billion in 2025. The company also observed that most operations are conducted within organized teams and structured infrastructure. The platforms, therefore, are becoming increasingly secure as they train consumers about new threats—the engineers at Bonk. Fun is also obsessed with acquiring territory and returning to a state of complete operational stability.
The case of Bonk.fun shows that social engineering attacks are a thorn in the flesh in the cryptocurrency industry. Even established platforms face risks when attackers target user trust rather than the underlying code. The new trend is to restore platform security and strengthen defenses against such cases.
Also Read: Bithumb Suspension Bombshell as South Korea Turns Up Heat on Crypto Exchange Now
