Bonk.fun Hack Exposes Solana Users to Wallet Drainer Attack

TheNewsCryptoPubblicato 2026-03-12Pubblicato ultima volta 2026-03-12

Introduzione

A security vulnerability on the Bonk.fun platform exposed Solana users to wallet drainer attacks. Malicious scripts were injected into the site, redirecting users to phishing pages that prompted them to approve transactions. These approvals allowed attackers to automatically drain tokens from users' wallets. The platform, which is used for meme token trading, was compromised, and users were deceived through fake reward claims and interface changes. Bonk.fun issued a warning on X, advising users not to interact with the site until it was secured. The developer team acted quickly to remove the malicious scripts and urged users to revoke any suspicious approvals. The incident raised concerns in the crypto community, though the prompt response helped mitigate potential damage.

The security vulnerability on Bonk.fun allowed malicious wallet drainer links to affect users who were not aware of the danger. Additionally, security experts detected the vulnerability after users encountered suspicious approval prompts while interacting with the Bonk.fun platform. The attacker injected malicious scripts to redirect users to phishing sites that demanded approvals from their connected wallets. These approvals allowed the malicious programs to drain the users’ tokens automatically from their wallets to the attacker’s addresses.

The exploit raised several concerns in the Solana ecosystem. The Bonk.fun is a site that interacts with the trading of meme tokens and the Decentralized Finance community. The attackers tried to deceive users by mimicking reward claims and token distribution through malicious interface changes. After the users accepted the request, the drainer would drain the assets from the users’ wallets within a matter of seconds.

The official X post of Bonk.fun said, “A malicious actor has compromised the BONKfun domain. Do not interact with the website until we have secured everything.”

Platform Response and Community Warnings

The developer community reacted quickly after the news became public. And immediately removed the malicious scripts that affected the Bonk.fun interface. The developer team immediately reviewed all integrations and external scripts associated with the interface that attackers might have exploited. The platform operators immediately alerted users to revoke any approvals made by malicious tokens. And to avoid clicking on unknown links shared in crypto-related groups. Blockchain investigators are closely monitoring the attacker’s wallets and all transactions associated with the exploit campaign.

Tom, the operator of Bonk.fun explained the issue on his X post. He expressed his answers saying, “We understand a lot of people are scared and rightly so, but we’re doing everything in our power to fix the situation.”

The crypto market took the incident seriously, as security vulnerabilities are a major concern for investors and affect the overall market sentiment. Meanwhile, market sentiment toward new meme token markets remained cautious. However, analysts argued that the quick response from the developer community could help limit potential damage. The potential damage that might be caused by a security incident involving a decentralized interface. The users of the Bonk interface alerted each other through social media networks, warning them of the phishing approvals that are being made by malicious tokens associated with the interface.

Highlighted Crypto News:

Metaplanet Launches Venture Arm to Expand Bitcoin Ecosystem Amid Market Volatility

TagsBlockchainBONKsecuritySolanaSolana (SOL)

Domande pertinenti

QWhat was the security vulnerability on Bonk.fun that affected Solana users?

AThe security vulnerability on Bonk.fun allowed malicious wallet drainer links to be injected, which redirected users to phishing sites. These sites then prompted users for approvals from their connected wallets, enabling malicious programs to automatically drain tokens from their wallets to the attacker's addresses.

QHow did the attackers deceive users on the Bonk.fun platform?

AThe attackers deceived users by mimicking reward claims and token distribution through malicious interface changes. After users accepted the approval requests, the drainer would drain the assets from their wallets within seconds.

QWhat was the official response from Bonk.fun regarding the domain compromise?

AThe official X post of Bonk.fun warned users, stating: 'A malicious actor has compromised the BONKfun domain. Do not interact with the website until we have secured everything.'

QWhat actions did the developer community take after the Bonk.fun exploit was discovered?

AThe developer community quickly removed the malicious scripts affecting the Bonk.fun interface, reviewed all integrations and external scripts for potential exploits, and alerted users to revoke any approvals made by malicious tokens and avoid clicking on unknown links.

QHow did the crypto market and community react to the Bonk.fun security incident?

AThe crypto market took the incident seriously as security vulnerabilities are a major concern for investors, affecting overall market sentiment. Users alerted each other through social media networks about phishing approvals, while analysts noted that the quick response from developers helped limit potential damage.

Letture associate

Soaring 20% Then Dropping 5%: When Will the Bottom of the Korean Stock Market Be?

"South Korean stocks face a turbulent period as the KOSPI index, after a 20% surge, fell 5% to 6257 points. The market is grappling with severe issues: over 500,000 leveraged retail accounts have been liquidated, and more than 24 trillion won has flowed from stocks into bank deposits for safety. This reflects a significant loss of market liquidity and shaken investor confidence. In response, Korean financial regulators are taking action. They have tripled the minimum保证金 (margin) requirement for single-stock leveraged ETF trades to 30 million won and are considering granting themselves "emergency intervention" powers. These could include capping leverage ratios and setting investment limits on these ETFs, seen by many as amplifying market volatility. Initial results show a 75% drop in these products' trading volume post-regulation. The market downturn has political repercussions, pushing President Yoon Suk-yeol's approval rating to a new low. Meanwhile, foreign investors made a record net purchase of 7.18 trillion won during a recent rebound, while domestic retail investors sold off massively. Morgan Stanley has upgraded South Korean stocks to "overweight," citing the ongoing "leverage unwinding" and potential for a 36% upside, with giants like Samsung Electronics and SK Hynix providing valuation support. However, analysts caution that the market's structure remains vulnerable to foreign capital flows, and the current low may not be the bottom."

marsbit10 min fa

Soaring 20% Then Dropping 5%: When Will the Bottom of the Korean Stock Market Be?

marsbit10 min fa

Goldman Sachs Stakes a Clear Position: This Is the Largest Capital Demand Cycle in Human History, and the Fed Is Just an Observer

Goldman Sachs argues that the world is entering the most capital-intensive investment cycle in history, driven by concurrent massive demands from AI infrastructure, reindustrialization, defense reinvestment, power grid rebuilding, supply chain realignment, and sovereign debt financing. This structural competition for capital is pushing its cost higher, fundamentally altering investment paradigms. Goldman's Mark Wilson states that the Federal Reserve is merely a "passenger, not the driver" in this shift, with rising yields rooted in these real economy demands rather than just monetary policy. While major indices appeared calm in July, underlying market movements were historic, featuring extreme stock dispersion and a severe momentum factor crash, leading to significant de-risking by fund managers. Wilson cautions against expecting a quick reversal in August, citing ongoing digestion of higher rates, disrupted risk models, and typically muted market performance ahead of US midterm elections. Corporate fundamentals remain robust with strong earnings, though growth rates are peaking in the US while accelerating in Europe. Notably, hyperscale cloud companies like Amazon and Microsoft are announcing staggering capital expenditure projections for 2027-2028, justified by explosive AI-related revenue growth and high returns. Amazon revealed its AI revenue run-rate exceeds $25 billion, growing triple-digits annually, and expressed confidence that AWS could become a trillion-dollar revenue business. The report concludes that a transitional period is underway, marked by a growing tension between aggressively investing private tech giants and increasingly capital-constrained sovereign governments. The AI super-cycle continues, with August likely being a consolidation phase.

marsbit15 min fa

Goldman Sachs Stakes a Clear Position: This Is the Largest Capital Demand Cycle in Human History, and the Fed Is Just an Observer

marsbit15 min fa

Outflow of Stablecoins from South Korea Continues for 18 Consecutive Months, Exceeding $360 Million in June

In June 2026, South Korea experienced a net outflow of stablecoins to overseas crypto exchanges, amounting to 560.3 billion won ($367 million). This represents approximately 78% of the net value of foreign stocks purchased by Korean investors in the same period. According to the Financial Supervisory Service (FSS), this marks the 18th consecutive month of net outflows, a trend ongoing since January 2025. The FSS reported that 2.76 trillion won ($1.8+ billion) in stablecoins were withdrawn from the country's five major exchanges to foreign platforms in June, while 2.2 trillion won ($1.4 billion) flowed back in. The second quarter of 2026 saw a significant net outflow of 1.69 trillion won (~$1.1 billion), surpassing net sales of foreign stocks in the same period. Analysts cite access to unavailable domestic financial instruments as a primary driver. Foreign platforms offer crypto derivatives, spot and futures products tied to major Korean stocks like Samsung and Hyundai, along with RWA tokenization, DeFi, staking, and leveraged products. Lawmaker Lee Jong-wook warned that the stablecoin outflows constitute capital flight, exposing investors to risks on unregulated foreign platforms. He called for accelerated regulatory reform and enhanced investor protection measures. The government is reportedly working on a digital assets law to foster the blockchain sector.

cryptonews.ru20 min fa

Outflow of Stablecoins from South Korea Continues for 18 Consecutive Months, Exceeding $360 Million in June

cryptonews.ru20 min fa

Trading

Spot
活动图片