Digital Asset
Intelligence
Security Incident · Solana Ecosystem

pump.fun Flash Loan Attack: $1.90M Reported Loss

·Historical incident record

Incident Overview

pump.fun is a Solana-based memecoin generator. On May 16th, the project suffered a $1.9 million exploit by an attacker who then began airdropping the money to somewhat random wallets. pump.fun stated on Twitter that the attack was due to a former employee exploiting their privileges within the company to illegally obtain withdrawal permissions and using a lending protocol to carry out flash loan attacks.

Sources & References

Original incident referencehttps://x.com/pumpdotfun/status/1791235050643636303 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    Jupiter

    Attack methodDDoS Attack
    Reported lossNot disclosed
  2. Incident date
    Target

    CondomSOL

    Attack methodRug Pull
    Reported loss$ 922,000
  3. Incident date
    Target

    Solareum

    Attack methodUnknown
    Reported loss$ 1,000,000
  4. Incident date
    Attack methodRug Pull
    Reported loss$ 281,300
  5. Incident date
    Target

    ALEX Lab

    Attack methodPrivate Key Leakage
    Reported loss$ 4,300,000