-
The Bubblemaps platform identified 13 addresses linked to the attacker and 35 affected users.
-
Bubblemaps confirmed USD 23,000 in on-chain losses, although there are reports of USD 100,000 stolen.
On March 11, an attacker took control of the domain of BONK.fun, one of the largest platforms for creating memecoins on Solana, and manipulated the site to trick users into stealing their funds, the BONK.fun team confirmed.
«A malicious actor has compromised the domain of BONKfun«Please do not interact with the website until we have secured everything,» they wrote from the BONK.fun X account.
NoticiasVE verified that when trying to enter the Phantom wallet, which has a phishing site blocker, it disables access to the BONK.Fun website, calling it insecure.
The BONK.fun team did not publish technical details on how the domain was compromised.
An external investigation revealed details of the BONK.fun hack
The attack did not explode no protocol vulnerability Solana nor from BONK.fun smart contracts. The entry point was the web domain: whoever controlled the site controlled what users saw and signed.
From Bubblemaps, an on-chain analysis platform, they pointed out that the mechanism used would have been a signature trap. The attacker would have replaced the site’s legitimate interface with a manipulated version that presented users with a false message of acceptance of terms of service.
By signing it, users They unknowingly authorized the emptying of their wallets.
According to the Bubblemaps report, they identified 13 addresses linked to the attacker:
According to this analysis, published on March 12, The hack affected 35 users and generated losses of USD 23,000. Bubblemaps warns that these figures are based on public on-chain data and user reports, and that they may not be definitive.
Additionally, the Bubblemaps report indicates that there are reports of losses exceeding USD 100,000but there is no on-chain evidence to support them.
What are BONK and BONK.fun in the Solana ecosystem?
BONK is the second largest memecoin in the Solana ecosystem in market capitalization, exceeding USD 500 million at the time of this writing.
Its creation platform, BONK.fun, recorded a total value locked (TVL) of more than USD 55 million in September 2025according to DeFiLlama. Since then, that value has fallen continuously and is currently around USD 18 million, a decrease of 67%.