Bonk.fun Hack Exposes Solana Users to Wallet Drainer Attack

TheNewsCryptoPubblicato 2026-03-12Pubblicato ultima volta 2026-03-12

Introduzione

A security vulnerability on the Bonk.fun platform exposed Solana users to wallet drainer attacks. Malicious scripts were injected into the site, redirecting users to phishing pages that prompted them to approve transactions. These approvals allowed attackers to automatically drain tokens from users' wallets. The platform, which is used for meme token trading, was compromised, and users were deceived through fake reward claims and interface changes. Bonk.fun issued a warning on X, advising users not to interact with the site until it was secured. The developer team acted quickly to remove the malicious scripts and urged users to revoke any suspicious approvals. The incident raised concerns in the crypto community, though the prompt response helped mitigate potential damage.

The security vulnerability on Bonk.fun allowed malicious wallet drainer links to affect users who were not aware of the danger. Additionally, security experts detected the vulnerability after users encountered suspicious approval prompts while interacting with the Bonk.fun platform. The attacker injected malicious scripts to redirect users to phishing sites that demanded approvals from their connected wallets. These approvals allowed the malicious programs to drain the users’ tokens automatically from their wallets to the attacker’s addresses.

The exploit raised several concerns in the Solana ecosystem. The Bonk.fun is a site that interacts with the trading of meme tokens and the Decentralized Finance community. The attackers tried to deceive users by mimicking reward claims and token distribution through malicious interface changes. After the users accepted the request, the drainer would drain the assets from the users’ wallets within a matter of seconds.

The official X post of Bonk.fun said, “A malicious actor has compromised the BONKfun domain. Do not interact with the website until we have secured everything.”

Platform Response and Community Warnings

The developer community reacted quickly after the news became public. And immediately removed the malicious scripts that affected the Bonk.fun interface. The developer team immediately reviewed all integrations and external scripts associated with the interface that attackers might have exploited. The platform operators immediately alerted users to revoke any approvals made by malicious tokens. And to avoid clicking on unknown links shared in crypto-related groups. Blockchain investigators are closely monitoring the attacker’s wallets and all transactions associated with the exploit campaign.

Tom, the operator of Bonk.fun explained the issue on his X post. He expressed his answers saying, “We understand a lot of people are scared and rightly so, but we’re doing everything in our power to fix the situation.”

The crypto market took the incident seriously, as security vulnerabilities are a major concern for investors and affect the overall market sentiment. Meanwhile, market sentiment toward new meme token markets remained cautious. However, analysts argued that the quick response from the developer community could help limit potential damage. The potential damage that might be caused by a security incident involving a decentralized interface. The users of the Bonk interface alerted each other through social media networks, warning them of the phishing approvals that are being made by malicious tokens associated with the interface.

Highlighted Crypto News:

Metaplanet Launches Venture Arm to Expand Bitcoin Ecosystem Amid Market Volatility

TagsBlockchainBONKsecuritySolanaSolana (SOL)

Domande pertinenti

QWhat was the security vulnerability on Bonk.fun that affected Solana users?

AThe security vulnerability on Bonk.fun allowed malicious wallet drainer links to be injected, which redirected users to phishing sites. These sites then prompted users for approvals from their connected wallets, enabling malicious programs to automatically drain tokens from their wallets to the attacker's addresses.

QHow did the attackers deceive users on the Bonk.fun platform?

AThe attackers deceived users by mimicking reward claims and token distribution through malicious interface changes. After users accepted the approval requests, the drainer would drain the assets from their wallets within seconds.

QWhat was the official response from Bonk.fun regarding the domain compromise?

AThe official X post of Bonk.fun warned users, stating: 'A malicious actor has compromised the BONKfun domain. Do not interact with the website until we have secured everything.'

QWhat actions did the developer community take after the Bonk.fun exploit was discovered?

AThe developer community quickly removed the malicious scripts affecting the Bonk.fun interface, reviewed all integrations and external scripts for potential exploits, and alerted users to revoke any approvals made by malicious tokens and avoid clicking on unknown links.

QHow did the crypto market and community react to the Bonk.fun security incident?

AThe crypto market took the incident seriously as security vulnerabilities are a major concern for investors, affecting overall market sentiment. Users alerted each other through social media networks about phishing approvals, while analysts noted that the quick response from developers helped limit potential damage.

Letture associate

Misjudged A-Shares: Resilience, Expectations, and Confidence

China's A-share market recently faced selling pressure, especially in tech sectors, initially triggered by a global tech sell-off that began in South Korea. However, the article argues this is a case of "mistaken injury" and highlights the market's underlying resilience. This resilience stems from three main pillars: **1) Tech Sector Fundamentals:** Unlike Korea's market dominated by a few memory chip stocks, China's tech sector is diversified across computing, communications, electronics, and semiconductors, supported by dual narratives of global AI supply chains and domestic substitution. Core areas like optical modules and fiber optics continue to show strong earnings growth. **2) "National Team" Support:** State-backed institutions and large corporations have made significant market purchases and announced buybacks, providing liquidity and signaling confidence. This is seen as a stabilizing policy signal, often associated with market bottoms. **3) Broader Market Pillars:** Other major sectors are showing endogenous recovery momentum. Consumer stocks benefit from stabilizing CPI and signs of sector recovery (e.g., liquor price hikes). Cyclical sectors like aluminum have high earnings, potential price increases due to tight supply, and low valuations. The financial sector offers stable dividends and low valuations. The conclusion is that the sell-off was driven by external contagion, not a collapse in fundamentals. With strong policy support and recovering momentum across key sectors, the A-share market possesses the toughness to regain stability.

marsbit29 min fa

Misjudged A-Shares: Resilience, Expectations, and Confidence

marsbit29 min fa

The Clarity Act's Journey Through Congress: The Thorny Path of Bipartisan Compromise in the U.S.

The U.S. Congress is struggling to advance the crypto market structure bill known as the Clarity Act, with bipartisan compromise proving difficult. Key hurdles include unresolved disputes over "yield" products and, more critically, the inclusion of strong ethics provisions for elected officials—a non-negotiable demand for many Democrats. While a compromise on yield was reached in May, securing only limited Democratic support in committee, the separate Senate Agriculture Committee version later passed with no Democratic votes due to the ethics impasse. As Republicans push for a full Senate vote in July, demands for ethics rules have expanded, and other contentious issues like developer protections and concerns from law enforcement and large banks further complicate negotiations. Despite consensus on the need for legislation, the path forward is unclear. Recent discussions between senators and White House officials aim to find acceptable ethics language. Some lawmakers question whether a compromise text can garner enough bipartisan support, with one Democrat stating the current proposal lacks the strong ethics provisions required for their vote. Potential short-term goals for the crypto community include symbolic Senate action before the August recess, a longer-term aim for passage by 2026, or establishing a detailed framework that addresses ethics and other compromises. The process remains arduous, relying on the traditional, vote-by-vote effort to build bipartisan support.

marsbit48 min fa

The Clarity Act's Journey Through Congress: The Thorny Path of Bipartisan Compromise in the U.S.

marsbit48 min fa

Are Kalshi and Polymarket Founders at Odds? This Business Rivalry Is More Brutal Than You Think

"The Rivalry Between Kalshi and Polymarket Founders Turns Bitter and Litigious" The intense feud between Tarek Mansour, CEO of Kalshi, and Shayne Coplan, founder of Polymarket, has escalated far beyond typical business competition into personal animosity and regulatory battles. Both lead billion-dollar prediction market platforms, but their approaches differ sharply. Kalshi positions itself as the compliant operator, securing U.S. regulatory approval before launching. In contrast, Polymarket initially operated offshore, allowing U.S. users to access its platform via VPN, which drew regulatory scrutiny. The conflict reached a peak in November 2024 when FBI agents raided Coplan's New York apartment. While Coplan publicly blamed political motives, his team privately suspected Kalshi was involved. According to sources, Kalshi's lawyers had previously reported Polymarket's operations to federal prosecutors, highlighting its accessibility to U.S. users despite a ban. This incident fueled mutual accusations and underhanded tactics, including social media smear campaigns and attempts to sabotage each other's major business deals. Their rivalry also played out in Washington, influencing regulatory debates. Kalshi actively lobbied against Polymarket's practices, framing them as illegal and unethical. Polymarket, after facing a CFTC fine and investigation, later acquired a licensed U.S. firm to launch a domestic app, regaining a foothold. Despite the hostility, both companies have seen massive growth, with combined trading volumes soaring. However, increased regulatory scrutiny, particularly around insider trading on Polymarket's platform, continues to pose challenges. The founders' deep-seated mutual disdain ensures their battle for market dominance remains as much a personal vendetta as a commercial one.

marsbit57 min fa

Are Kalshi and Polymarket Founders at Odds? This Business Rivalry Is More Brutal Than You Think

marsbit57 min fa

Trading

Spot
活动图片