Pump.fun pauses trading after apparent flash loan attack
Pump.fun is “aware” that bonding curve contracts on Pump.fun were exploited, and has since paused trading
Dall-e modified by Blockworks
Pump.fun was attacked Thursday by an exploiter who seemingly used flash loans to buy out the bonding curve.
In a post on X, Pump.fun said that it was “aware” that the contracts were compromised and were investigating.
“We have upgraded the contracts so the attacker cannot siphon any more funds. The TVL in the protocol right now is safe,” the team said. “We’ve paused trading — you cannot buy and sell any coins at the moment. Any coins that are currently in the process of migrating to Raydium cannot be traded and will not be migrating for an indefinite period of time.”
Igor Igamberdiev, head of research at Wintermute, analyzed the situation in a series of posts on X, saying that the key was compromised, “though the possibility of an inside job remains.”
Igamberdiev said that the amount lost by Pump.fun is “at least” 12,000 SOL, or roughly $2 million.
An account on X going by Stacc seemed to take credit for the attack, writing “I’m about to change the course of history” in a post.
Stacc seemed to imply in his posts that he didn’t intend to keep the stolen funds, but rather planned to transfer the “remaining balances of bonding curves” to some token users.
It’s not clear as of publication how Stacc was able to execute the attack, or if they’re distributing the balances to random people.
As Blockworks previously reported, Pump.fun lets developers launch tokens without seed liquidity for a couple of dollars. Its revenue comes from users buying and selling tokens.
Tokens that exceed market caps of $69,000 can then be listed on the Raydium DEX.
This is a developing story.
Get the news in your inbox. Explore Blockworks newsletters:
- Blockworks Daily: The newsletter that helps thousands of investors understand crypto and the markets, by Byron Gilliam.
- Empire: Start your morning with the top news and analysis to inform your day in crypto.
- Forward Guidance: Reporting and analysis on the growing intersection of crypto and macroeconomics, policy and finance.
- 0xResearch: Alpha directly in your inbox. Market highlights, data, degen trade ideas, governance updates, token performance and more.
- Lightspeed: Built for Solana investors, developers and community members. The latest from one of crypto’s hottest networks.
- The Drop: For crypto collectors and traders, covering apps, games, memes and more.
- Supply Shock: Tracking Bitcoin’s rise from internet plaything worth less than a penny to global phenomenon disrupting money as we know it.
