Hackers Compromise Bonk.fun in Phishing Attack

Hackers compromised the domain of Bonk.fun, a Solana-based memecoin launchpad, on March 11, 2026, by gaining access to a team account and deploying a wallet-draining phishing scheme that tricked users into signing a fraudulent terms-of-service prompt. The platform's team issued an urgent warning on X early the next day, advising users to avoid the website until the breach was resolved.

The attack exploited the site's frontend rather than its underlying blockchain infrastructure, according to Tom, an operator for Bonk.fun who posts on X under the handle SolportTom. Attackers used the hijacked account to push a malicious popup mimicking a standard compliance request. Users who connected their wallets and approved the prompt during the brief hijack window granted attackers permission to transfer funds from their accounts, leading to rapid drainage in some cases. Tom emphasized that only those who interacted with the site after the compromise were at risk, while prior wallet connections and trades conducted through external terminals remained unaffected.

The team detected the breach swiftly, thanks in part to community alerts on social media, which helped contain the damage. Browser...