Bonk.fun Domain Compromised, Users Warned Against Phishing Attack
- Hackers compromised a team account of the Solana-based platform Bonk.fun, deploying a wallet-draining phishing prompt.
- The phishing attack targeted users who signed a fake terms-of-service message post-breach.
- Browser security systems flagged the site for suspected phishing shortly after the breach was detected.
- Bonk.fun has operated for about eight months within the broader Bonk ecosystem on the Solana blockchain.
The Bonk.fun team quickly identified and responded to a domain hijacking incident that led to a wallet-draining phishing attack targeting its users. The breach involved hackers pushing a malicious prompt through the compromised domain, urging users to sign fraudulent terms-of-service messages designed to authorize unauthorized transactions.
Although browser warnings helped limit potential losses, users who interacted with the malicious prompt remain at risk. The platform continues efforts to resolve the situation and safeguard its community from further threats. (Source)
