Bonk.fun Domain Hijacked in Wallet Drainer Attack on Solana Users

Bonk.fun, a memecoin launch platform built on Solana, warned users after its website domain was compromised in a wallet-draining attack. The project urged visitors not to interact with the platform while the team works to regain full control of the domain.

According to the team, the breach occurred after a malicious actor gained access to one of the project’s internal accounts and used that access to take control of the website.

Fake Transaction Prompt Used in the Attack

The attacker reportedly deployed a fake message on the site that prompted visitors to sign a fraudulent transaction disguised as a terms-of-service approval. Users who signed the malicious request risked having funds removed from their wallets.

Project operator Tom said that previously connected wallets were not affected. Users trading Bonk-related tokens through external tools also remained safe.

Some Users Report Losses

A few users claimed losses after the incident, including reports of about 50 and 10 SOL being drained. The team said the breach was contained quickly and investigations are ongoing.

Disclaimer

This content is for informational purposes only and does not constitute financial, investment, or legal advice. Cryptocurrency trading involves risk and may result in financial loss.