BONK ecosystem platform Bonk.fun has warned users to stay away from its website after hackers compromised a team account and installed a crypto wallet drainer on the domain.
Bonk.fun, a community-led token issuance platform built on the Solana network and backed by projects including Raydium, said the breach allowed attackers to manipulate the site and attempt to steal funds from connected crypto wallets.
The platform’s operator, known as Tom, said the incident began after hackers gained control of a team account. Once inside, the attackers were able to modify the website and add malicious code designed to drain funds from users who interacted with the compromised page.
According to Tom, the impact appears to be limited. Only users who signed a fake terms-of-service prompt that appeared on the site after the breach were affected. By approving that message, those users unknowingly authorized a malicious transaction that allowed the drainer to access their wallets.
What has happened?
Users who did not sign the fake message or interact with the malicious prompt are unlikely to have been impacted, the team said. Still, Bonk.fun urged everyone to avoid visiting the website until the issue is fully resolved.
As a precaution, the platform advised anyone who connected their wallet to the site after the breach to check their wallet activity and revoke any suspicious permissions.
Bonk.fun is part of the expanding ecosystem around the BONK token, a community-driven cryptocurrency that gained popularity within the Solana network.
The platform provides an opportunity for users to launch tokens based on the BONK ecosystem.
Bonk.fun’s new incident comes as crypto drainers become a common threat in industry
Incidents involving compromised websites and crypto drainers have become common in the crypto industry. Crypto drainers compromise project websites or social media platforms with the aim of tricking users into signing malicious transactions.
The transactions give the hackers access to the users’ assets. Since blockchain transactions cannot be reversed, users who have signed these transactions have no hope of recovering their assets.
The Bonk.fun team stated that it is currently investigating the breach of the platform with the aim of securing the platform before reopening the website. Further updates are expected after the investigation is complete and the team confirms the website is safe for use.
The crypto industry has encountered a series of security threats in recent times. It is therefore essential to carefully analyze any transaction request before approving it.