Solana memecoin launchpad Bonk.fun hit by domain takeover attack

Solana-based memecoin launchpad Bonk.fun experienced a domain takeover after attackers gained access to a team account and pushed a wallet drainer to the official site, according to the operator. Only users who approved a fake terms-of-service message were impacted, and reported losses were small.

The team urged users to stay off the site while they worked to restore control. In a post on its official X account, Bonk.fun said a malicious actor had taken over the domain and asked people not to interact with the website until it was secured.

Tom, known as SolportTom and the operator of Bonk.fun, said the breach stemmed from a compromised team account that allowed the attacker to add a wallet-draining script to the site. He added that the team detected the issue quickly, which helped keep losses small. Tom acknowledged users’ concerns and said the team is working to resolve the problem.

Bonk.fun, formerly LetsBonk.fun, is a launchpad in Solana’s memecoin market. It offers instant token deployment, real-time trading via bonding curves, and automated liquidity provisioning. A portion of platform fees goes to buybacks and burns of the BONK token. The operator has emphasized community participation and accessibility for users without technical backgrounds.

Incidents like this often rely on social engineering and deceptive prompts that lead users to sign harmful messages or transactions. PeckShield reported that crypto hack losses fell 69% in February to $26.5 million, down 69% from January and the lowest monthly total since March 2025.

The Bonk.fun team asked users not to interact with the site until the security review is complete and the domain is restored. A timeline for full service recovery was not disclosed.