Future

Raydium

Flash

Security

<p>The post <a href="https://coinpedia.org/news/how-did-an-ex-employee-steal-2m-from-pump-fun-using-flash-loans/">How Did an Ex-Employee Steal $2M from Pump.Fun Using Flash Loans?</a> appeared first on <a href="https://coinpedia.org">Coinpedia Fintech News</a></p> 
<p>Pump.fun, a Solana-based platform for launching tokens, has suffered a major security breach, resulting in a loss of approximately $2 million. The attacker leveraged flash loans to exploit the platform’s bonding curve contracts, undermining the token launch mechanism.&nbsp;</p> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">We are aware that the <a href="https://t.co/uE2QNKXkIT">https://t.co/uE2QNKXkIT</a> bonding curve contracts have been compromised and are investigating the matter.<br><br>We have upgraded the contracts so the attacker cannot siphon any more funds. The TVL in the protocol right now is safe. <br><br>We’ve paused trading — you…</p>— pump.fun (@pumpdotfun) <a href="https://twitter.com/pumpdotfun/status/1791164438852083807?ref_src=twsrc%5Etfw">May 16, 2024</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div>
</figure> 
<p>Flash loans allow users to borrow large amounts without collateral only if they return the funds within the same transaction. The attacker acquired enough SOL through this method to buy out the bonding curves for the meme coins of Pump. fun, which led to vast financial losses.</p> 
<h2 class="wp-block-heading" id="h-security-measures-and-trading-suspension"><strong>Security Measures and Trading Suspension</strong></h2> 
<p>Following the attack, Pump.fun stopped all trading activities on the platform. The team stated:</p> 
<blockquote class="wp-block-quote is-layout-flow wp-block-quote-is-layout-flow"> 
 <p>“”We have stopped trading — you cannot buy and sell any coins. Any coins currently migrating to Raydium will not be able to be traded for an indefinite period.”</p> 
</blockquote> 
<p>However, they assured the users that encrypted liquidity on Raydium was safe and unaffected. Moreover, Pump.fun contracts were updated to prevent any further exploitation.&nbsp;</p> 
<h2 class="wp-block-heading" id="h-who-attacked-solana-s-pump-fun-nbsp"><strong>Who attacked Solana’s Pump.fun?&nbsp;</strong></h2> 
<p>The wallet address of the exploiter was identified as 7ihN8QaTfNoDTRTQGULCzbUT3PHwPDTu5Brcu4iT2paP, where the attacker purchased all tokens of the new projects quickly and pushed the bonding curve to its limit. Initially, an unidentified user called ‘Stacc’ has claimed responsibility for the attack in a series of posts who described it as an act of protest and not exactly a financial profit.&nbsp;</p> 
<p>Later, the attacker was identified as a former employee named Jarrett, known as STACCOverflow. He claimed that he was not satisfied with the company and that he aimed to disrupt the platform. In addition, Jarrett criticized the company on social media and stated his plan to change the course of history, clearing that imprisonment did not worry him. He also planned to distribute the funds he had stolen through an airdrop, thereby earning him the nickname “Web3 Robinhood.”</p> 
<h2 class="wp-block-heading" id="h-pump-fun-s-response-and-future-steps"><strong>Pump.fun’s Response and Future Steps</strong></h2> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr"><a href="https://t.co/uE2QNKXkIT">https://t.co/uE2QNKXkIT</a> coin migration issue post-mortem<br><br>TL;DR:<br><br>1. the <a href="https://t.co/uE2QNKXkIT">https://t.co/uE2QNKXkIT</a> contracts are safe. they have always been safe<br>2. a former employee used their privileged position at the company to misappropriate ~12.3K SOL (~$1.9m)<br>3. <a href="https://t.co/uE2QNKXkIT">https://t.co/uE2QNKXkIT</a> is…</p>— pump.fun (@pumpdotfun) <a href="https://twitter.com/pumpdotfun/status/1791235050643636303?ref_src=twsrc%5Etfw">May 16, 2024</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div>
</figure> 
<p>Pump.fun has <a href="https://twitter.com/pumpdotfun/status/1791235050643636303">assured</a> us that their contracts have always been safe, and the attack resulted from a former employee misusing their privileged position. Currently, the platform is again back online and allows its users to launch new coins and trade any coins that didn’t reach 100% between 15:21 and 17:00 UTC. In addition, the coins that reached 100% during this period would be compensated to the users by relaunching on Raydium with at least 100% of its liquidity within the next 24 hours. Also, the good news for the users is, for the next seven days, the trading fees are reduced to 0%!</p> 
<p>Currently, the Pump.the fun team is working together with top security experts to minimize this incident’s impact and to make sure that similar incidents are not repeated in the future. They expressed gratitude to their community for their trust and support during this challenging time, stating, “Solana shitcoins are back and greater than ever.”</p>

How Did an Ex-Employee Steal $2M from Pump.Fun Using Flash Loans?

Table of Contents

CoinPedia News

Other articles published on May 17, 2024

FOMO Strikes as BRISE Coin Climbs 7%

Solana Slayer? NFTFN Poised to Steal the Spotlight in the Next Crypto Boom

Bridging Innovation and Tradition in Liechtenstein’s Digitalization: Insights from Dr. Clara Guerra

Dogecoin Gains Thrill Investors

Shiba Inu (SHIB), Pepe (PEPE), and This Trump-Themed Memecoin Have Outpaced Bitcoin This Week

Notcoin moves 1.03 bln NOT tokens to Telegram founder, the reason

Join our free newsletter for daily crypto updates!