Solana

Raydium

Million

Solana-based platform Pump.fun suffered an exploit that left the crypto community with many questions. The attack stole millions of dollars in users’ funds, but the reasons behind it and the exact amount of the loot were unclear. Amid the uncertainty, some claimed that a crypto Robinhood had emerged. 
<h2 style="font-weight: 400" id="80-million-taken-in-crypto-heist">$80 Million Taken In Crypto Heist?</h2> 
On Thursday, the platform Pump.fun <a href="https://x.com/pumpdotfun/status/1791164438852083807" target="_blank" rel="noopener nofollow">announced</a> its bounding curve contracts had been compromised. In the post, the team alerted users that all trading was temporarily halted while they investigated the incident. 
Pump.fun is a trading platform created to “prevent rugs” by ensuring that all created crypto tokens are safe. The platform allows users to easily launch instantly tradeable tokens with no presale and no team allocation. 
This solution became an extremely popular alternative among influencers and users who wanted to <a href="https://www.newsbtc.com/news/by-the-numbers-over-1-million-new-crypto-tokens-launched-since-april/" target="_blank" rel="noopener ">create tokens</a> without the complexity or high costs of launching a project. 
It uses bonding curve contracts for the tokens, a mathematical model that determines a token’s price based on supply, increasing with the number of tokens bought. After the token’s market capitalization reaches $69,000, part of the liquidity is deposited on Raydium to be burned. 
Since the attack, the team has assured users that the contracts have been upgraded to prevent further fund loss, adding that the protocol’s total value locked (TVL) is safe. 
However, the community’s reports were contradictory and alarming. Some users claimed the <a href="https://www.newsbtc.com/news/fake-nft-project-hack-cto-vanishes-after-allegedly-stealing-94-sol/" target="_blank" rel="noopener ">attacker</a> had taken $80 million in crypto from the platform’s bonding curve contracts, which worried the affected users. 
According to Lookonchain’s report, the hacker was quickly identified. At first, he pretended to be an unaware user, asking what the damages were. However, he later accused the platform’s founders of withdrawing the exact amount stolen a day prior. 
<img loading="lazy" decoding="async" class="size-large wp-image-608673" src="https://www.newsbtc.com/wp-content/uploads/2024/05/GNwEuqcbYAA1IdK.jpeg?w=860&amp;resize=860%2C719" alt="crypto" width="860" height="719" srcset="https://www.newsbtc.com/wp-content/uploads/2024/05/GNwEuqcbYAA1IdK.jpeg?w=1110 1110w, https://www.newsbtc.com/wp-content/uploads/2024/05/GNwEuqcbYAA1IdK.jpeg?w=460 460w, https://www.newsbtc.com/wp-content/uploads/2024/05/GNwEuqcbYAA1IdK.jpeg?w=768 768w, https://www.newsbtc.com/wp-content/uploads/2024/05/GNwEuqcbYAA1IdK.jpeg?w=860&amp;resize=860%2C719 860w, https://www.newsbtc.com/wp-content/uploads/2024/05/GNwEuqcbYAA1IdK.jpeg?w=750 750w" sizes="(max-width: 860px) 100vw, 860px" data-recalc-dims="1"> 
An X user <a href="https://x.com/ardizor/status/1791186167645303080" target="_blank" rel="noopener nofollow">claimed</a> the individual chose to “be a Robin Hood, dropping hacked cash to $SOL communities.” The attacker also stated in a post his desire to “change the course of history.” However, his “heroic outlaw” endeavors affected 1,882 addresses. 
<h2 style="font-weight: 400" id="what-happened">What Happened?</h2> 
Despite the speculation and the attacker’s posts, it was later revealed that he was a Pump.fun ex-employee. In its post-mortem <a href="https://x.com/pumpdotfun/status/1791235050643636303" target="_blank" rel="noopener nofollow">post</a>, the platform’s team revealed that the individual had used their position to misappropriate funds from the bonding curve contracts. 
The attacker illegitimately accessed the accounts after obtaining the private keys, “using their privileged position at the company.” The former employee used flash loans from Solana lending protocol to steal 12,300 SOL, worth around $1.9 million. 
Per the post, he borrowed SOL to buy as many tokens as possible in Pump.fun. When the tokens hit 100% on their respective bonding curves, the attacker used the keys to access the bonding curve <a href="https://www.newsbtc.com/news/company/bridging-web3-optimizing-liquidity-and-growth-through-cross-chain-composability/" target="_blank" rel="noopener ">liquidity</a> and repay the flash loans. 
Fortunately, the attacker could only access $1.9 million out of the $45 million liquidity in contracts. Since then, the team has redeployed the bonding curve contracts and offered a plan to help affected crypto investors. 
To make users whole, the team will “seed the LPs for each affected coin with an equal or greater amount of SOL liquidity that the coin had at 15:21 UTC within the next 24 hours.” Moreover, they are offering 0% trading fees for the next 7 days. As a user pointed out, this action is “non-trivial” since Pump.fun makes $1 million daily from fees. 
<img loading="lazy" decoding="async" class="wp-image-608670 size-large" src="https://www.newsbtc.com/wp-content/uploads/2024/05/TOTAL_2024-05-17_11-01-18.png?w=860&amp;resize=860%2C439" alt="crypto, TOTAL" width="860" height="439" srcset="https://www.newsbtc.com/wp-content/uploads/2024/05/TOTAL_2024-05-17_11-01-18.png?w=1008 1008w, https://www.newsbtc.com/wp-content/uploads/2024/05/TOTAL_2024-05-17_11-01-18.png?w=460 460w, https://www.newsbtc.com/wp-content/uploads/2024/05/TOTAL_2024-05-17_11-01-18.png?w=768 768w, https://www.newsbtc.com/wp-content/uploads/2024/05/TOTAL_2024-05-17_11-01-18.png?w=860&amp;resize=860%2C439 860w, https://www.newsbtc.com/wp-content/uploads/2024/05/TOTAL_2024-05-17_11-01-18.png?w=750 750w" sizes="(max-width: 860px) 100vw, 860px" data-recalc-dims="1">

Crypto Post-Mortem: Here’s How Pump.Fun Was Exploited For $2 Million

Table of Contents

NewsBTC

Other articles published on May 18, 2024

Ethereum Eyes Breakthrough: Can It Overcome Key Resistance at $3,200?

4 Cryptos with Best ROI

Bitcoin Breakout From Major Resistance Levels Signals Bullish Momentum

These 3 Coins Are In The Lead For Massive Gains As The Bull Run Approaches

SATS (1000SATS) Crypto Price Confirms Support, Ready to Pump: Can the BRC20 Meme Coin Spike 50x?

XRP Ledger (XRPL) Transactions in Q1 Jump 108%, but With Catch

Join our free newsletter for daily crypto updates!