Results for ""
News

Pump.fun Hit for $2M in Flash Loan Exploit

Solana's buzzy memecoin launcher hit with attack.
William M. Peaster William M. Peaster May 16, 20241 min read
5
0
Pump.fun Hit for $2M in Flash Loan Exploit

Pump.fun, a buzzy Solana memecoin launcher with huge levels of activity levels recently, paused operations after suffering a flash loan attack that resulted in an estimated loss of 12.3k SOL (~$2M). 

What’s the scoop?

  • Former Pump.fun employee staccoverflow has claimed responsibility for the attack, citing personal anguish and contempt for his previous bosses. 
  • The exploit involved a private key compromise and flash loans of SOL borrows via marginfi to manipulate Pump.fun’s memecoin bonding curves, followed by withdrawing liquidity meant for Raydium pools. 
  • While loss estimates ranged from ~$300k to ~$80M amid the initial chaos, Wintermute’s head researcher Igor Igamberdiev has now pegged the total loss as at least $2M

Bankless take:

Pump.fun is currently the memecoin capital of Solana, and lately it’s seemed unstoppable. That said, this attack, while far from devastating, certainly takes some wind out of the platform’s sails. However, it seems likely the token launcher can rebound fast.

Across the two days preceding the exploit, Pump.fun generated $1.9M worth of revenues or 95% of the total losses of the attack. It’s not a desirable situation to be in, but the team has the resources to make its users whole. All in all, the episode is a reminder of the potential risks around the crypto frontier and the importance of private key security. The Pump.fun team dropped the ball in a big way here, so watch for how they respond in the days ahead. 

William M. Peaster

Written by William M. Peaster

629 Articles View all      

William M. Peaster, Senior Writer, has been with Bankless since January 2021. Immersed in Ethereum since 2017, he writes the Metaversal newsletter on the onchain frontier, covering everything from AI projects to crypto games, as the team’s lead NFT analyst. With a background in creative writing, he writes fiction and publishes art on Ethereum in his free time. He lives in Washington.

No Responses