Father
Professional
- Messages
- 2,602
- Reaction score
- 831
- Points
- 113
A platform for launching Pump meme tokens.fun on Solana accused a former employee of an exploit with $1.9 million in damages.
According to the statement, the attacker used a "privileged position" to gain access to withdrawal rights.
He borrowed flash loans in SOL, which he used to buy up tokens to the maximum until they reached 100% on the "binding curve". As a result, the hacker gained access to liquidity to pay off obligations.
Out of the total amount of liquidity of $45 million, losses amounted to $1.9 million.
The team promised 100% compensation to affected users and restarted token trading, zeroing out the commission for the next seven days.
"Solana-shitcoins are back and more significant than ever," the statement reads.
Igor Igamberdiev, head of research at Wintermute, confirmed that the incident is related to the compromise of private keys and the user X under the nickname staccoverflow.
https://t.co/uE2QNKXkIT coin migration issue post-mortem
TL;DR:
1. the https://t.co/uE2QNKXkIT contracts are safe. they have always been safe
2. a former employee used their privileged position at the company to misappropriate ~12.3K SOL (~$1.9m)
3. https://t.co/uE2QNKXkIT is…
— pump.fun (@pumpdotfun) May 16, 2024
According to the statement, the attacker used a "privileged position" to gain access to withdrawal rights.
He borrowed flash loans in SOL, which he used to buy up tokens to the maximum until they reached 100% on the "binding curve". As a result, the hacker gained access to liquidity to pay off obligations.
Out of the total amount of liquidity of $45 million, losses amounted to $1.9 million.
The team promised 100% compensation to affected users and restarted token trading, zeroing out the commission for the next seven days.
"Solana-shitcoins are back and more significant than ever," the statement reads.
Igor Igamberdiev, head of research at Wintermute, confirmed that the incident is related to the compromise of private keys and the user X under the nickname staccoverflow.
1/6
It seems like @pumpdotfun lost ~2k SOL ($300k+) and a bunch of memecoins through a possible private key leakage
So let me share evidence of it https://t.co/yuuKYkamfZ
— Igor Igamberdiev (@FrankResearcher) May 16, 2024