Complete Gate Post tasks to upgrade your rank

Credit Ranking

[//]:content-type-MARKDOWN-DONOT-DELETE
![](https://gimg2.gateimg.com/image/article/1716963180sdfx.jpeg)
## [TL; DR]
Pump.fun lost crypto assets worth around $2 million in a DeFi security breach.

Jarret, Pump.fun’s ex-employee, distributed stolen tokens as airdrop to members of several crypto communities. 

Slothana, DogWifHat, Bonk, Sealana, Smog ($SMOG) and Lucky Boo (BOO) are examples of leading memecoins on the <a href="/price/solana-sol" target="_blank" class="blog_inner_link">Solana</a> blockchain. 

## Introduction 
Despite the number of years the DeFi sector has existed, malicious exploitation is still ongoing due to crypto platforms’ poor security measures. However, one of the positive things we have witnessed within the past year is an increase in cooperation between law enforcement agents and DeFi projects when a crypto heist occurs. Today, we assess how the Pump.fun crypto heist occurred and its implications for the entire DeFi sector. 
## How Pump.fun Fell Victim to a $2 Million Heist
Pump.fun, [a Solana based DeFi memecoin protocol](https://www.gate.io/learn/articles/what-s-behind-solana-s-biggest-meme-launch-platform-pump-fun/2671 "a Solana based DeFi memecoin protocol"), was breached on 16 May leading to a loss of cryptocurrencies worth about $2 million. Basically, the exploiter used flash loans to manipulate the protocol’s bonding curve contracts. 

After the exploit Pump.fun used its social media platforms to alert its users about the DeFi security breach. Through its [X platform profile the team said](https://twitter.com/pumpdotfun/status/1791164438852083807?ref_src=twsrc%5Egoogle%7Ctwcamp%5Eserp%7Ctwgr%5Etweet "X platform profile the team said"), “We have upgraded the contracts so the attacker cannot siphon any more funds. The TVL in the protocol right now is safe. We’ve paused trading — you cannot buy and sell any coins at the moment. Any coins that are currently in the process of migrating to Raydium cannot be traded and will not be migrating for an indefinite period of time.”

Based on how the attack occurred some industry leaders believed that the Pump.fun flash loan exploit was an inside crypto attack. In this regard, Igor Igamberdiev, head of research at Wintermute, [commented](https://twitter.com/FrankResearcher/status/1791164323047293325 "commented"): “It seems like pumpdotfun lost ~2k SOL ($300k+) and a bunch of memecoins through a possible private key leakage.”

However, after a few hours the Pump.fun team promised its investors that it had upgraded its smart contract to prevent similar future attacks. It [wrote](https://www.bitget.com/news/detail/12560604005265 "wrote"): “We have upgraded the contracts so the attacker cannot siphon any more funds. The TVL in the protocol right now is safe. “We’ve paused trading — you cannot buy and sell any coins at the moment.”

It added, “Any coins that are currently in the process of migrating to Raydium cannot be traded and will not be migrating for an indefinite period of time.”

However, trading on the platform resumed 5 hours after the Solana Pump.fun attack. Due to the inconveniences that arose from the attack the team scrapped trading fees for the next seven days. Also, it promised to seed the liquidity pools (LPs) for affected tokens so as to restore the trading functionality. 

[The team clarified the issue](https://twitter.com/pumpdotfun/status/1791235050643636303 "The team clarified the issue"): “You can launch new coins and trade any coin that did not reach 100% between 15:21-17:00 UTC. To make users whole, any coin that reached 100% between 15:21-17:00 UTC will go live on Raydium with >= 100% of the liquidity that it previously had.”

It continued, “We are committed to ensuring the safety of our users and are cooperating with relevant parties, including law enforcement, to minimize the damage.” 
## Flash Loans and Smart Contracts: Unpacking the Pump.fun Exploitation
As hinted above, the memecoin platform exploit was a result of the manipulation of the Margin.fi flash loan facility. Primarily, the bad actor accessed tokens from the Margin.fi then acquired SOL. From there, he used SOL to buy the Pump.fun tokens. In the process, he did not even use his money. 

Notably, the transaction pushed the bonding curve to its limit. For context, the bonding curve is a smart contract for creating a market for tokens without using crypto exchanges. Thus, the manipulation prevented the tokens from being listed on the Raydium decentralized exchange based on the Solana blockchain. 
## The Attacker's Identity and Motives
At first the attacker was identified by his wallet address, 7ihN8QaTfNoDTRTQGULCzbUT3PHwPDTu5Brcu4iT2paP. Later, he was identified as Jarrett, also known by his X username, STACCOverflow. Jarret is Pump.fun’s former employee who seemed disgruntled by how the team runs the decentralized finance (DeFi) project. Jarret’s post on X social platform points to his premeditated Solana Pump.fun attack as the next screenshot shows.
![](https://gimg2.gateimg.com/image/article/1716963512a.jpeg)
Source: [x.com](https://twitter.com/STACCoverflow/status/1791134470071865576 "x.com")

Based on Jarret’s social media posts his main motive for the Solana ecosystem security breach was to punish his former bosses for their unfair and unprofessional conducts during the performance of their duties. He showed his negative sentiment towards his ex-bosses through his X post as the next image shows. 
![](https://gimg2.gateimg.com/image/article/1716963546b.jpeg)
Source: [x.com](https://twitter.com/STACCoverflow/status/1791134474387808363 "x.com")

## The Web3 Robinhood? The Attacker's Plan to Redistribute Wealth
In one of his X posts, Jarret stated that he would redistribute the DeFi loot, which earned him the nickname Web3 Robin Hood. As per his promise Jarret distributed the stolen cryptocurrency to members of several crypto communities, including Slerf, Stacc, Saga, and Risklol. As a result, one of the community members commented as shown in the image. 
![](https://gimg2.gateimg.com/image/article/1716963578c.jpeg)
Source: [x.com](https://twitter.com/ardizor/status/1791186167645303080 "x.com")

In the meantime, several crypto users from the said crypto communities have admitted that they received the airdrop. However, what is not clear is the exact method he used to distribute them. 

##  Beware of Scammers: Risks Following the Pump.fun Incident
The crypto community should remain vigilant after the [Pump.fun blockchain platform security breach](https://www.gate.io/learn/articles/seek-the-next-crypto-trend-amid-meme-waves/2914 "Pump.fun blockchain platform security breach"). This is because some malicious actors may masquerade as the Pump.fun team that is willing to reimburse their tokens. They may send malicious links purporting that the users should provide their details to claim their stolen cryptocurrencies. In a bid to benefit from the cryptocurrency theft recovery some investors may end up losing more crypto assets. 
## List of the Best SOL meme coins
Solana has many memecoins, some of which might have been listed on Pump.fun. The popular Solana-based meme coins include Slothana, [DogWifHat](https://www.gate.io/blog_detail/4106 "DogWifHat"), Bonk, Sealana, Smog ($SMOG) and Lucky Boo (BOO).
## Conclusion
Pumpfun’s ex-employee stole cryptocurrencies worth around $2 million in a bid to punish his ex-bosses whom he accused of being unprofessional in their business conduct. However, Jarret distributed the tokens he stole to members of several crypto communities through an airdrop. DogWifHat, [Bonk](https://www.gate.io/blog_detail/4041/bonk-memecoin-poised-for-a-bullish-breakout-analysis-and-predictions "Bonk"), Sealana, Smog ($SMOG) are examples of popular [Solana-based memecoins](https://www.gate.io/price/view/solana-meme-coins "Solana-based memecoins"). 

<div class="blog-details-info">
<div>Author:** Mashell C.**, Gate.io Researcher
<div class="info-tips">\*This article represents only the views of the researcher and does not constitute any investment suggestions.
<div>\*Gate.io reserves all rights to this article. Reposting of the article will be permitted provided Gate.io is referenced. In all cases, legal action will be taken due to copyright infringement.
</div>


简体中文

English

Tiếng Việt

Español

Русский язык

Français

ภาษาไทย

日本語

Indonesia

Deutsch

عربي

Português (Portugal]

Português (Brasil]

繁體中文

Українська

Pump.fun’s ex-employee stole crypto assets as a means  to punish his ex-bosses for their past deeds.

福利中心

铭文导航-铭文Launchpad

铭文-铭文导航

铭文-web3startup

新币挖矿

小红花-Exchange-Startup

交易-创新交易

交易-盘前交易

打新

小红花-Learn & Explore-博客

小红花-Learn & Explore-快讯

币圈-币圈-未来事件

小红花-Learn & Explore-聊天室

小红花-Learn & Explore-直播

小红花-Learn & Explore-动态

年度账单

币圈

Gate OTC

芝麻金融-更多-财富管理

机构-APIs

机构-大宗交易服务

机构-经纪商项目

全球做市商计划

机构-托管和资产管理

机构借贷

机构-做市商项目

小红花-Promotions-机构和VIP服务

量化基金

机构-基础架构

机构-交易

机构-金融

结构化产品

机构-主页

衍生品-统一账户

芝麻金融-更多-抵押借币

vip服务

机构

策略跟单

现货跟单

合约跟单

跟单

量化策略-探索

量化策略-进阶

量化策略-基础

机器人广场

创建机器人

探索机器人

杠杆网格

无限网格

期现套利

组合指标策略

智能调仓

现货马丁格尔

合约网格

现货网格

交易机器人

芝麻金融-更多-ETH2.0挖矿

芝麻金融-更多-法币理财

USDE挖矿

链上赚币

芝麻金融-理财-双币宝

芝麻金融-理财-定期理财(屯币)

芝麻金融-理财-结构性理财

芝麻金融-理财-理财宝

芝麻金融-理财-余币宝

GT挖矿

芝麻金融-更多

芝麻金融-理财

赚币

模拟交易

衍生品-实盘跟单

衍生品-期权

衍生品-交割合约

衍生品-永续合约

衍生品-合约中心

合约入门

合约活动

衍生品

交易-量化策略

交易-杠杆ETF

交易-杠杆交易

交易-闪兑

交易-现货交易

交易

行情

买币-gateCard

卖币

买币-快捷交易

买币

买币-paywith

法币定投

小红花-推广

新手指南

活动中心

小红花-Learn & Explore-学院

任务广场

小红花-Exchange-最新公告

小红花-Exchange-帮助中心

小红花-Exchange-交易所

gate商店

小红花-Promotions-推荐官计划

小红花-Promotions-邀请计划

小红花-promotions-代理商

cextg小程序

储备金

合作伙伴

小红花

web3

Insider Exploits Solana's Meme Coin Platform, Pump.fun, for $2 Million