<ul>
 <li>Pump.fun, a Solana-based memecoin launchpad identifies the recent exploit’s attacker.</li>
 <li>The Pump.fun team to seed LPs for affected coins.</li>
</ul>
Pump.fun, a Solana-based token launching platform, suffered an exploit on May 16. According to a post-mortem report on its X account, it identified the exploit to be executed by a former employee who illegitimately gained access to the withdrawal authority by misusing the privileged position.&nbsp;&nbsp;
The exploit which occurred at 15.17 UTC the previous day, caused a $1.9M loss to the platform and halted trading as bond curves had reached 100% for most coins. Pump.fun stated that it will compensate Liquidity Protocols for every coin and users’ losses.&nbsp;
<h3 class="wp-block-heading" id="h-how-did-the-pump-fun-exploit-happen">How Did the Pump.fun Exploit Happen</h3>
Pump.fun allows users to mint tokens with minimal fees, within a few dollars. Launched in 2023, Pump.fun protects user funds and prevents rugs by prohibiting pre-sale or team allocation for the created tokens.&nbsp;
The exploit occurred when the former employee gained access to admin privileges. The ex-employee, after gaining access, used flash loans to buy as many coins as required to push the bonding curves to hit 100%. Once it hit the cent value they utilised it to gain access to bonding curve liquidity.&nbsp;
Furthermore, the liquidated funds were in turn used to pay off the flash loans. The funds lost were 12,300 <a href="https://thenewscrypto.com/solana-sol-price-prediction/" target="_blank" rel="noopener noreferrer nofollow">SOL</a> which amounts to approximately $2M. The loss comprised 4% of the total 45M liquidity available in bond curve contracts.&nbsp;
Moreover, an X account with the username ‘Staac’, who might be the ex-employee, posted a thread claiming the attack. They stated it to be a ‘robbery’ and indicated their former employers as “not the type of ppl you want front n center as the face of blockchain”. Lookonchain <a href="https://x.com/lookonchain/status/1791312660958732357" target="_blank" rel="noopener noreferrer nofollow">reported</a> that the attacker has released a <a href="https://thenewscrypto.com/pepe-pepe-price-prediction/" target="_blank" rel="noopener noreferrer nofollow">meme coin</a> capitalising on the attack.&nbsp;
Additionally, Pump.fun has <a href="https://x.com/pumpdotfun/status/1791235050643636303" target="_blank" rel="noopener noreferrer nofollow">described</a> the measures taken to reprimand the exploit’s losses. They assured the users of funds safety and announced zero trading fees for the next seven days. The team will seed the LPs for all affected coins that reached 100% and will make them available for trading within the next 24 hours.&nbsp;&nbsp;&nbsp;
Highlighted Crypto News Today:&nbsp;
<a href="https://thenewscrypto.com/senate-votes-60-38-to-overturn-sec-crypto-policy-biden-opposed/" rel="noopener noreferrer nofollow">Senate Votes 60-38 to Overturn SEC Crypto Policy, Biden Opposed</a>

Pump.fun Links $1.9M Exploit to Former Employee

Table of Contents

TheNewsCrypto

Other articles published on May 17, 2024

Ethereum's Price Drops as SEC ETF Decision Looms

Pink Drainer Shuts Down After Stealing $85 Million in Crypto

League of Legends Patch Addresses Community Feedback

Korean FSS Governor meets U.S. SEC Chair Gensler to cooperate on crypto regulations

Morgan Stanley Bets BIg on Crypto with $270 Million GBTC Stake

Chainlink’s latest multi-month high – All about how it affects LINK’s price

Join our free newsletter for daily crypto updates!