Solana On-Chain Meme Coin Issuance Platform Bonk.fun Exposes Security Crisis, Website Hacked and Malicious Code Injected, Some Users Find Cryptocurrencies Disappear After Interaction
Bonk.fun announced via its official X account: “Malicious actors have compromised the BONKfun domain. Until we thoroughly secure everything, please do not interact with the website.”
A malicious actor has compromised the BONKfun domain, do not interact with the website until we have secured everything.
— BONK.fun (@bonkfun) March 12, 2026
Team Emphasizes Minimal Losses
Bonk operator Tom (@SolportTom) explained the incident earlier. He stated that hackers hijacked the team’s account and forcibly injected cryptocurrency draining software (Drainer) into the domain. Tom further mentioned that only users who inadvertently signed a “fake terms of service” on the Bonk website would suffer fund losses.
However, he emphasized that the team detected the anomaly promptly, and the actual damage caused by this attack was minimal. Tom pointed out:
We understand how panicked everyone is right now; it’s human nature. But rest assured, the team is doing everything possible to fix this vulnerability.
As of writing, Bonk.fun’s official channels have not released further updates on the incident.
AI Fuels Scam Surge! 2025 Cryptocurrency Losses Exceed $17 Billion
In recent years, with rapid advancements in artificial intelligence (AI) technology and the proliferation of wallet draining tools, phishing attacks in the crypto space have become increasingly rampant, with more sophisticated and difficult-to-defend methods. Hackers now prefer using domain hijacking, impersonation, and social engineering attacks to directly exploit users’ trust.
Disclaimer: The information on this page may come from third parties and does not represent the views or opinions of Gate. The content displayed on this page is for reference only and does not constitute any financial, investment, or legal advice. Gate does not guarantee the accuracy or completeness of the information and shall not be liable for any losses arising from the use of this information. Virtual asset investments carry high risks and are subject to significant price volatility. You may lose all of your invested principal. Please fully understand the relevant risks and make prudent decisions based on your own financial situation and risk tolerance. For details, please refer to
Disclaimer.
Related Articles
Florida and Massachusetts Recover $5.4M in Crypto Fraud Assets from Romance Scam Scheme
Authorities in Florida and Massachusetts recovered $5.4 million in cryptocurrency from romance scam-related investment fraud, with victims receiving partial refunds. Ongoing efforts continue against crypto fraud, with additional assets under litigation.
GateNews35m ago
Crypto’s most ridiculous robbery? A hacker minted $1 billion in DOT tokens, but only stole $230k
Hackers exploited the Hyperbridge cross-chain bridge vulnerability to mint 1 billion Polkadot (DOT) tokens. The nominal value was over $1.19 billion, but due to insufficient liquidity, they ultimately cashed out only about $237k. The attack was successful because the smart contract did not properly verify messages, allowing the hackers to steal administrative control and mint coins. The incident highlights the key role of market liquidity in the success of arbitrage.
CryptoCity13h ago
Fake Ledger Live App Steals $9.5M From 50+ Users Across Multiple Blockchains
A fraudulent Ledger Live app on Apple's App Store stole $9.5 million from over 50 users by compromising wallet information. The incident, involving significant losses for major investors, raises concerns about App Store security, prompting discussions of a possible lawsuit against Apple.
GateNews14h ago
Criticized for freezing USDC too slowly! Circle CEO: We will definitely wait for the court’s order before freezing—refusing to freeze privately/by ourselves without authorization
Circle CEO Jeremy Allaire said the company will not proactively freeze wallet addresses unless it receives a court order or a request from law enforcement. Even amid hacker money-laundering disputes and community backlash, Circle still insists on operating in accordance with the rule of law.
Jeremy Allaire sets Circle’s law-enforcement bottom line
-----------------------------
As the global cryptocurrency market roils, Circle’s CEO Jeremy Allaire, the stablecoin issuer, delivered a clear stance on the most sensitive issue in the market at a press conference in Seoul, South Korea. He pointed out that although Circle has the technical means to freeze specific wallet addresses, unless it receives a court order or a formal instruction from law-enforcement authorities, the company will not take such action on its own.
CryptoCity16h ago
Attacker Exploiting Bridged Polkadot Vulnerability Transfers $269K to Tornado Cash
On April 15, Arkham reported that the attacker who exploited a Bridged Polkadot vulnerability transferred around $269,000 in stolen funds to Tornado Cash, complicating asset tracking.
GateNews17h ago
Bitcoin Developers Propose BIP 361 to Protect Against Quantum Computing Threats
Bitcoin developers have proposed BIP 361 to safeguard the network against quantum computer risks by freezing vulnerable addresses. The proposal includes a phased plan to transition users to quantum-safe wallets, but it has sparked debate on user control and security.
GateNews17h ago
