-
The Bonk.fun website was temporarily compromised by hackers.
-
A malicious prompt attempted to drain funds from connected wallets.
-
Only users who signed a fake terms-of-service message were affected.
-
The team said the breach was detected quickly and losses were minimal.
Memecoin Launchpad Domain Compromised
The official website of Bonk.fun was briefly hijacked after attackers gained control of the platform’s domain and deployed a malicious wallet-draining prompt.
The platform warned users not to interact with the site after detecting the breach. According to the team, the attack involved a fake terms-of-service message that appeared on the website and requested wallet interaction.
Users who approved the malicious prompt risked losing funds from their connected wallets.
Attack Detected Quickly
The Bonk team said the breach was identified soon after it began and that the number of affected users was limited.
The launchpad has become a key hub within the Solana memecoin ecosystem, allowing users to deploy new tokens instantly, trade them through bonding curves, and automatically add liquidity to markets.
Security incidents involving wallet drainers and phishing attacks have become increasingly common in the crypto industry. Analysts estimate crypto scam losses reached roughly $17 billion in 2025 as attackers rely more on social engineering, domain hijacking, and malicious wallet interactions.
