Whether the crypto market is booming or not, hacking is one constant in the cryptocurrency market. On Thursday, hackers seized the domain of Bonk.fun, the Solana token launchpad powered by Raydium and BONK, and planted a wallet stealer there.
Operator Tom announced the hack to the community via his X account @SolportTom. He said: “Please do not use the http://bonk.fun domain until further notice. Hackers have hijacked a team account, forcing the domain to be depleted.” This was also confirmed by Bonk’s official X handle.
The leak highlights the continuing vulnerabilities on the cryptocurrency front-end, even as institutional participation flourishes and the ecosystem becomes larger.
Tom added that past connections to bonk.fun remain secure, as do transactions performed through third-party terminals. Only those who signed false terms of service messages on compromised sites after the breach were affected were affected, and swift community alerts appear to have limited the damage.
“We are doing everything we can to resolve this issue,” the operator said, prioritizing users who have trusted the platform over the past eight months. The operator did not disclose the dollar amount of the damage but stressed that the incident was discovered quickly.
