The domain of Solana-based platform memecoin launchpad Bonk.fun has been hijacked after attackers gained access to a team account and deployed a wallet-draining scheme through the site.
The Bonk.fun account on X warned users early Thursday not to interact with the website while the team worked to secure the domain. “A malicious actor has compromised the BONKfun domain, do not interact with the website until we have secured everything,” the project <a href="https://x.com/bonkfun/status/2031927971611922517" rel="noopener noreferrer nofollow">wrote</a> in a post on X.
X user Tom, who is an operator behind Bonk.fun, said the attackers <a href="https://x.com/SolportTom/status/2031927208315666648" rel="noopener noreferrer nofollow">used</a> the compromised access to push a fake message designed to trick visitors into signing a malicious transaction.
<figure><img src="https://s3.cointelegraph.com/uploads/2026-03/019ce0de-1080-74c5-a031-dbfc26bb3013.PNG" alt="Bonk.fun warns hackers hijacked domain in wallet-drainer attack">
 <figcaption>Bonk.fun domain hijacked. Source: <a href="https://x.com/SolportTom/status/2031940500203454521" rel="noopener noreferrer nofollow">Tom</a>
 </figcaption>
</figure>
In a follow-up post, Tom said the exploit targeted users who signed a fraudulent terms-of-service prompt that appeared on the site during the breach. Users who had previously connected wallets to Bonk.fun were not affected, and traders interacting with Bonk-related tokens through external terminals were also safe.
Related: <a href="https://cointelegraph.com/news/trust-wallet-address-poisoning-protection-32-evm-chains" rel="noopener noreferrer nofollow">Trust Wallet adds real-time scam address checks for crypto users</a>
<h2 id="some-users-report-losses">Some users report losses</h2>
Some users reported losses in replies to the warning posts. One user <a href="https://x.com/jrezzysol/status/2031961601847542165" rel="noopener noreferrer nofollow">claimed</a> roughly 50 Solana (<a rel="noopener noreferrer nofollow">SOL</a>) had been drained from their wallet, while another said they <a href="https://x.com/solanabees/status/2031971048095187063" rel="noopener noreferrer nofollow">lost</a> about 10 SOL. More users <a href="https://x.com/Naturalfreedoms/status/2031928478707433868" rel="noopener noreferrer nofollow">claimed</a> varying amounts of <a href="https://x.com/Purps911/status/2031928805716115875" rel="noopener noreferrer nofollow">losses</a>.
Meanwhile, Tom said the incident was contained quickly and that reported losses appear limited so far. “We understand a lot of people are scared and rightly so but we’re doing everything in our power to fix the situation,” he added.
Cointelegraph reached out to Tom for comment but had not received a response by publication.
Magazine: <a href="https://magazine.cointelegraph.com/bitcoin-7-years-upgrade-post-quantum-bip-360-co-author/" rel="noopener noreferrer nofollow">Bitcoin may take 7 years to upgrade to post-quantum — BIP-360 co-author</a>

Bonk.fun warns hackers hijacked domain in wallet-drainer attack

Table of Contents

Cointelegraph

Other articles published on Mar 12, 2026

Join our free newsletter for daily crypto updates!