Solana-based Bonk.Fun Domain Hijacked and Wallet Drained

The official website of Solana-based memecoin launchpad Bonk.fun was temporarily hijacked on 11^th March, 2026. The incident occurred after hackers gained unauthorized control of the domain and attempted to drain user funds. The platform alerted users to the breach through its official account on X.com, warning them to avoid interacting with the website while the issue was being investigated. 

According to the team at Bonk.fun, a malicious actor compromised the website and deployed a wallet-draining mechanism that targeted users who signed a fraudulent terms-of-service prompt. 

Hackers Gained Access to User Wallets

The platform announced on its X.com account, “A malicious actor has compromised the BONKfun domain, do not interact with the website until we have secured everything.” A prominent community member known as Tom (SolportTom), an operator behind Bonk, explained that hackers had “hijacked a team account forcing a drainer on the domain.” He emphasized that only users who signed a fake terms-of-service message on Bonk’s website were affected. 

Despite the attack, Tom stated that the losses appeared to be limited because the breach was detected quickly and steps were taken to contain the damage. The team reassured users that it is working to secure the platform and restore normal operations. 

Bonk.fun, formerly known as LetsBonk.fun, has become a notable tool within the Solana memecoin ecosystem, allowing users to launch tokens instantly and trade them through bonding curves with automated liquidity features. 

The incident highlights growing risks in the crypto sector. Blockchain analytics firm Chainalysis reported that global crypto scam losses reached roughly around $27 billion in 2025 as phishing and wallet draining attacks continue to evolve.