Connect with us

Crypto World

Bonk.fun Domain Seized by Hackers Who Deployed Wallet-Draining Malware

Published

on

Brian Armstrong's Bold Prediction: AI Agents Will Soon Dominate Global Financial

TLDR

  • Hackers took control of Bonk.fun’s domain and deployed wallet-draining malware on the platform
  • Users affected were those who approved a fraudulent terms-of-service prompt following the compromise
  • Previously established connections and transactions through external terminals remained unaffected
  • Originally branded as LetsBONK, the service went live in April 2025
  • By late 2025, Bonk.fun’s market dominance plummeted from 84% to a mere 7%

On March 12, Bonk.fun—a Solana-powered meme coin launchpad supported by Raydium and the BONK token—issued an urgent alert advising users to steer clear of its website after cybercriminals hijacked a team member’s account and embedded wallet-draining malware into the domain.

Tom, the platform’s operator posting from the handle @SolportTom, disclosed the security incident on X and instructed users to avoid accessing the site pending resolution. The official Bonk X account echoed this warning.

According to Tom, the attack exclusively impacted users who approved a deceptive terms-of-service authorization on the compromised platform following the breach. Historical site connections and transactions executed via third-party trading interfaces remained secure.

An investigation into the incident is currently ongoing. While the team hasn’t revealed the total financial damage, Tom indicated that swift detection and rapid community notification helped contain the losses.

Advertisement

“We’re employing every available resource to resolve this matter,” Tom stated, emphasizing that users who’ve placed their trust in the platform over the past eight months remain the team’s top concern.

Launched in April 2025 through a collaboration between the BONK community and Raydium, Bonk.fun enables users to create tokens on Solana without any programming knowledge, utilizing dynamic logarithmic bonding curves. The platform previously operated under the name LetsBONK.

Bonk.fun’s Dramatic Market Share Collapse

In the months following its debut, the platform surpassed Pump.fun to capture 84% of Solana’s launchpad sector by mid-2025. This commanding position proved temporary.

By year-end 2025, Bonk.fun’s market control had crashed to merely 7%, based on analytics from Dune. Monthly revenue tumbled to approximately $84,000, while Pump.fun generated over $720,000 during the equivalent timeframe.

The downturn resulted from unsustainable reward systems and a deceleration in successful token deployments. Pump.fun countered by initiating substantial buyback programs, acquiring Kolscan, and enhancing its infrastructure capacity.

Advertisement

In early 2026, Bonk.fun eliminated creator fees entirely in an attempt to recapture users. This strategy produced a brief revenue surge toward the end of January 2026.

Platform Lost Traction Prior to Security Breach

The rebound was short-lived. Pump.fun introduced fresh incentive programs and recaptured more than 70% of the market by February 2026.

This breach fits within a wider trend affecting the cryptocurrency sector. Phishing operations that manipulate users into authorizing malicious transactions on compromised domains have been escalating. Throughout 2025, fraudulent proceeds from such schemes approached $17 billion.

The Bonk.fun team continues to advise all users against accessing the website until they can verify the platform’s security has been fully restored.

Advertisement

At the time of publication, no specific loss amount from the hack has been publicly disclosed.

Source link

Advertisement
Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Crypto World

JPMorgan Sued Over $328M Crypto Ponzi Scheme

Published

on

JPMorgan Sued Over $328M Crypto Ponzi Scheme

JPMorgan is facing a lawsuit for allegedly enabling a $328 million crypto Ponzi scheme run by now-defunct Goliath Ventures.

Investors on Tuesday filed a proposed class action in the US District Court for the Northern District of California, accusing JPMorgan of ignoring suspicious transactions and allowing Goliath to use its infrastructure to collect investor funds.

The lawsuit notes that despite JPMorgan CEO Jamie Dimon’s repeated criticism of Bitcoin (BTC), the bank allegedly failed to prevent crypto scammers from carrying out fraudulent wire transactions.

“Chase, by virtue of its Know Your Customer actually knew that Goliath was acting as a ‘private equity’ cryptocurrency pool operator investing money for investors, without being licensed at all to sell these investments,” the complaint states.

Advertisement

Complaint focuses on JPMorgan account flows

The US Attorney’s Office for the Middle District of Florida announced the arrest of Goliath CEO Christopher Delgado on Feb. 24. He faces a maximum penalty of 30 years in federal prison if convicted on all counts.

Prosecutors said Goliath Ventures, formerly known as Gen-Z Venture Firm, operated the scheme from January 2023 through January 2026.

The lawsuit claims JPMorgan was the sole banking institution for Goliath from January 2023 to May or June 2025. “Goliath obtained at least $328 million from what are believed to be over 2,000 investors,” the complaint notes.

Source: Law.com

The complaint also describes money moved from a JPMorgan account to Goliath wallets held at Coinbase.

It alleges that from January 2023 through June 2025, about $253 million was deposited into the bank’s 0305 account, which is nearly two-thirds of the $328 million investors reportedly provided. Of that total, roughly $123 million was transferred to Goliath’s wallets maintained by Coinbase.

Advertisement

US complaint also names Bank of America account

A separate criminal complaint filed by the US government said Goliath also held business accounts at Bank of America.

“Delgado was a co-signatory on the BOA 9136 account in the name of Goliath,” the Feb. 20 complaint states, adding that Goliath directors told at least one investor that Delgado controlled the account.

Coinbase, Fraud, Law, Bank of America, KYC, AML, Court, JPMorgan Chase
Source: US Department of Justice

The complaint further detailed that funds sent by investors were primarily deposited into JPMorgan’s 0305 account or the BOA 9136 account or transferred directly to Goliath’s wallets at Coinbase.

The government said Delgado was the sole signatory on Goliath’s Coinbase wallets.

More complaints are coming as the team is still identifying victims

The complaint was filed by a team of attorneys from Shaw Lewenz, Sonn Law Group and Schwartzbaum. The first named plaintiff, Robby Alan Steele, said he invested a total of $650,000, including retirement funds.

Advertisement

Related: Ex-CFO sentenced to two years for $35M crypto fraud scheme

Shaw Lewenz’ Jordan Shaw said there would be more complaints to come, as the team is still identifying individuals and entities they believe to be complicit.

“We are being purposeful and precise in who we file against, to be complementary to the receiver and his efforts,” Shaw said, adding: “The goal is not to duplicate efforts, but instead to maximize recovery.”

Magazine: Would Bitcoin really be at $200K if not for Jane Street? Trade Secrets

Advertisement