Key Highlights:
- Bonk.fun, crypto token launch platform on Solana, informed its users that the platform has been hacked.
- The platform’s founder Tom also issued a statement on X.
- The founder also assured users that the team is doing everything to resolve the issue.
Bonk.fun, a crypto token launch platform that is built on Solana blockchain, posted on its X account today, March 12, 2026, that the platform has been hacked and warned the users to not visit the official website. According to the project, a malicious attacker managed to compromise the domain and deploy a cryptocurrency wallet drainer.
A malicious actor has compromised the BONKfun domain, do not interact with the website until we have secured everything.
— BONK.fun (@bonkfun) March 12, 2026
The founder of the platform, Tom, had also posted an X post, who urged the users to avoid interacting with the website until the issue was fully resolved.
The team had also issued warnings to inform the community members to not visit the domain during the attack as it could risk their wallet.
Domain Compromise Triggers Immediate Warning
The warning came after the attackers gained access to a team account and used it to manipulate the bonk.fun domain. Once inside, they managed to place a malicious script, also known as a “drainer” that did the rest.
A drainer is nothing but a tool that is designed to trick users to sign a transaction that secretly transfers crypto assets from their wallet to the attacker.
In this case, the malicious prompt reportedly appeared as a routine approval message or terms-of-service (TOS) confirmation. If a user signed the message, the drainer could gain permission to withdraw tokens from their wallet.
The notice was issued by the team as soon as they got to know about the breach and they asked users to stay away from the domain till the security checks were finished.
Founder Addresses User Concerns After Bonk.fun Domain Hack
Right after this incident took place, the platform’s founder, Tom, moved quickly to calm users who feared that their wallets might have been compromised.
To answer the concerns I’m seeing:
1. No if you connected to bonk fun in the past you’re not affected
2. No if you trade bonk fun tokens on terminals etc you’re not affected
3. The only people affected were people who signed a fake TOS message on the bonkfun domain after…
— Tom (@SolportTom) March 12, 2026
He posted on X and clarified that users who had previously connected their wallets to Bonk.fun, token launch platform on Solana, are not at risk. According to him, the exploit only affected people who interacted with the compromised website during the attack window. Since wallet drains require users to approve a new transaction, earlier connections to the platform are all safe and sound.
He also addressed concerns about trading activity outside the site. Tom confirmed that users trading Bonk.fun-related tokens on external platforms or trading terminals have not been affected by this particular incident.
In his tweet, the founder also highlighted that only a small number of users have been affected as of now. No official number was stated though.
Tom put a lot of stress on the fact that the team had identified the issue quickly and issued warnings across community pages, which helped limit the damage.
He acknowledged that users are worried but assured them that the team is working around the clock to make sure that the platform is secure and that the community is protected.
Impact of the Bonk.fun Hack
The extent of the damage has not been reported yet but as the warnings were raised quickly, the spread of the malicious attack was limited. As confirmed by the founder, the wallets that were connected in the past traders and trades on external platforms have not been affected, so this means that majority of the users might have avoided damage.
Even though it sounds alarming, it is similar to the attack on Blur in 2023 when hackers exploited a team-related email account to impersonate the platform and trick users into signing fraudulent approvals, though major funds were mostly preserved due to rapid warnings.
Also Read: Binance Suing WSJ a “Terrible Decision”, Says Zero Knowledge Founder
Credit: Source link
