BONK.fun Domain Hijacked in Breach as Wallet Drainer Goes Live
- BONK.fun’s hijacked domain exposed users to a wallet drainer during a live frontend breach
- The attack hit users who signed a fake prompt, while earlier wallet links stayed unaffected
- BONK.fun now faces trust pressure as Pump.fun regains launchpad share on Solana
A fresh security breach has pushed BONK.fun back into the spotlight after hackers seized the platform’s domain and deployed a wallet drainer on the site. The incident occurred on Thursday and was first flagged by operator Tom, who warned users on X not to interact with the domain until the team regained control.
Bonk’s official X account later confirmed the same alert, turning a routine trading day into a live security response for one of Solana’s best-known token launchpads. The breach landed at a fragile moment for the project and the wider market. BONK, the meme coin tied to the platform, slipped nearly 1% over the past 24 hours and remains down 44% over the past year.
That weakness stood in parallel to the broader meme coin segment, which posted a 2.14% daily loss and pushed total sector value to around $29.42 billion. However, major names, including DOGE, PEPE, Memecore, and SHIB, all traded in the green, making the timing of the incident especially damaging for a platform already fighting to regain traction.
Hijacked Domain Turned Into a Live Wallet Trap
The compromise appears to have been a frontend attack rather than a failure of earlier wallet connections or trades executed elsewhere. Tom told users that previous connections to BONK.fun remained safe and that activity through third-party terminals was not affected.
According to the team’s public statements, the damage was limited to users who signed a fake terms-of-service prompt after the domain was hijacked. That detail matters because wallet drainers rely on user approval. Once a malicious prompt is signed, funds can be moved out without the victim realizing the full scope of the request.
The incident fits a broader pattern across crypto, where phishing attacks on hijacked domains continue to hit users even as the sector grows more sophisticated. In 2025, fraudulent inflows linked to scams approached $17 billion, while AI-powered impersonation and pig butchering schemes surged by 1,400%.
User Loss Claims Surfaced as Alerts Spread Fast
Tom said the breach was detected quickly and that the team was working to contain the fallout. He also said the operator was prioritizing users who had trusted the platform over the past eight months. No official dollar figure for total losses has been released so far.
Still, user reports showed that the consequences were serious for some victims. One X user wrote that they lost $273,000 after connecting to the compromised site and said the wallet was left “bone dry.” That account remains a public claim rather than a disclosed platform total, but it shows how costly a brief frontend breach can become once signatures are approved.
BONK.fun Lost Ground After Its Early Solana Lead
Launched in April 2025 by the BONK community alongside Raydium, BONK.fun grew fast by letting users deploy tokens without coding through dynamic logarithmic bonding curves. By mid-2025, it had overtaken Pump.fun and captured 84% of Solana’s launchpad market.
Nonetheless, that lead did not last. Reward systems became harder to maintain; successful launches slowed; and Pump.fun responded with buybacks, the acquisition of Kolscan, and stronger scaling.
By the end of 2025, BONK.fun held just 7% of the market, according to Dune. Revenue fell to about $84,000, while Pump.fun climbed above $720,000. Early 2026 fee cuts briefly lifted activity, but the rebound faded as rivals rolled out fresh incentives and regained more than 70% share by February.
Related: Japanese Yen Rallies as Iran Conflict Jolts Global Markets
Hack Adds Fresh Pressure in a Shaky Crypto Market
The breach now adds another challenge for BONK.fun as traders weigh platform trust against a weaker market backdrop. Solana has fallen 5.14% over the last seven days despite a 2.57% daily rise, while Bitcoin is down 3.32% on the week and trades at $70,572.
For BONK.fun, the episode is more than a one-day security scare. It is a reminder that in crypto, growth figures, market share, and token momentum can all be overshadowed in minutes when a compromised domain turns into a live drain on user funds.
