Solana Ecosystem Bonk.fun Official Website Hacked and Injected with Drainer, Some Users’ Funds Stolen, Team Says Losses Are Limited, Cryptocurrency Scams Have Reached $17 Billion in 2025
The Solana-based meme coin platform Bonk.fun has revealed a security crisis. The official website was hijacked by hackers and malicious code was embedded. Some users discovered that their cryptocurrencies disappeared after interacting with the site.
Bonk.fun announced via its official X account: “Malicious attackers have infiltrated the BONKfun domain. Until we fully resolve the security issues, please do not interact with the website in any way.”
Image source: X/@bonkfun
Bonk operator Tom (@SolportTom) recently explained the incident. He stated that hackers hijacked the team’s account and forcibly embedded a cryptocurrency draining software (Drainer) into the domain. Tom further mentioned that only users who inadvertently signed a “fake service agreement” on the Bonk website are at risk of losing funds.
However, he emphasized that the team detected the abnormal activity immediately, and the actual losses caused by this attack are minimal. Tom said:
We understand how panicked everyone is right now; it’s human nature. But rest assured, the team is doing everything possible to fix this vulnerability.
As of writing, Bonk.fun’s official channels have not released further updates on the incident.
In recent years, with rapid advances in artificial intelligence (AI) technology and the proliferation of wallet draining tools, phishing attacks in the crypto space have become more rampant and sophisticated. Hackers now prefer methods such as domain hijacking, impersonation, and social engineering to directly steal users’ trust.
According to a Chainalysis report, the total global losses from cryptocurrency scams in 2025 have soared to an astonishing $17 billion. The report also warns that these large-scale scams are becoming increasingly industrialized at an observable rate.