Hackers Hijack Bonk.fun Domain, Deploy Wallet-Draining Phishing Prompt
The post Hackers Hijack Bonk.fun Domain, Deploy Wallet-Draining Phishing Prompt appeared on BitcoinEthereumNews.com.
In brief The Bonk.fun team is urging users not to visit the site after hackers compromised a team account and pushed a wallet-draining phishing prompt through the domain. The attack has targeted users who signed a fake terms-of-service message after the breach, according to the platform’s operator. Browser security systems later flagged the site for suspected phishing, while the team said losses appear limited because the issue was detected quickly. Hackers hijacked the domain of the Solana-based token launch platform Bonk.fun on Wednesday, prompting the team to warn users not to interact with the site after attackers deployed a wallet-draining phishing message. An operator associated with Bonk.fun, known as Tom, said in a post on X that a team account had been compromised, allowing attackers to push a malicious prompt through the bonk.fun domain. The prompt reportedly asked users to sign a fake terms-of-service message designed to authorize transactions that could drain connected crypto wallets. Phishing attacks remain a persistent threat in crypto, where malicious websites and wallet-signing prompts can give attackers direct access to users’ funds if approved. “Do not use the bonk.fun domain until further notice,” Tom wrote. “Hackers have hijacked a team account, forcing a drainer on the domain.” Visitors attempting to access the site late Wednesday were met with browser security warnings flagging the page for suspected phishing, Decrypt confirmed. The team said the attack targeted only users who interacted with the malicious prompt after the compromise. According to Bonk.fun, users who had previously connected their wallets to the site or who traded tokens launched through the platform on external terminals are not affected. “The only people affected were people who signed a fake TOS message on the bonkfun domain after the incident,” Tom said in a follow-up post. He added that the issue was detected…
Filed under: News - @ March 12, 2026 4:19 am