Solana On-Chain Meme Coin Issuance Platform Bonk.fun Exposes Security Crisis, Website Hacked and Malicious Code Injected, Some Users Find Cryptocurrencies Disappear After Interaction
Bonk.fun announced via its official X account: “Malicious actors have compromised the BONKfun domain. Until we thoroughly secure everything, please do not interact with the website.”
A malicious actor has compromised the BONKfun domain, do not interact with the website until we have secured everything.
— BONK.fun (@bonkfun) March 12, 2026
Team Emphasizes Minimal Losses
Bonk operator Tom (@SolportTom) explained the incident earlier. He stated that hackers hijacked the team’s account and forcibly injected cryptocurrency draining software (Drainer) into the domain. Tom further mentioned that only users who inadvertently signed a “fake terms of service” on the Bonk website would suffer fund losses.
However, he emphasized that the team detected the anomaly promptly, and the actual damage caused by this attack was minimal. Tom pointed out:
We understand how panicked everyone is right now; it’s human nature. But rest assured, the team is doing everything possible to fix this vulnerability.
As of writing, Bonk.fun’s official channels have not released further updates on the incident.
AI Fuels Scam Surge! 2025 Cryptocurrency Losses Exceed $17 Billion
In recent years, with rapid advancements in artificial intelligence (AI) technology and the proliferation of wallet draining tools, phishing attacks in the crypto space have become increasingly rampant, with more sophisticated and difficult-to-defend methods. Hackers now prefer using domain hijacking, impersonation, and social engineering attacks to directly exploit users’ trust.