Article Details

Original Article Text

Click to Toggle View

Pump.fun X account hacked to promote scam governance token. The immensely popular memecoin generator Pump.fun had its X account hacked to promote a fake "PUMP" token cryptocurrency scam. Pump.fun is a Solana-based cryptocurrency platform that allows users to create and trade memecoins. Launched in January 2024, it has become a quick and easy way for users to launch their own Solana tokens, but it has also faced scrutiny for its use to conduct pump-and-dump schemes. Today, the X account for Pump.fun (@pumpdotfun) was compromised to promote a fake Pumpfun governance token called "PUMP." "Introducing $PUMP the OFFICIAL pump.fun GOVERNANCE token, where Democracy has never been this degen. We will also be REWARDING our OG DEGENS," read the post. Soon after, the threat actors promoted another token named "GPT-4.5", promising to delete the Pumpfun X account if the token reached a $100 million market cap. Pumpfun has acknowledged the breach, posting on its Telegram channel that users should not interact with the account. "Our X account is compromised. Do not interact with it. We are investigating," a Pumpfun staff member posted to Telegram. BleepingComputer contacted Pumpfun to learn more about how the account was breached and will update the story if we receive a response.

Daily Brief Summary

CYBERCRIME // Pump.fun's Social Media Account Hacked to Promote Scam Tokens

Pump.fun's X account was compromised to advertise a fraudulent "PUMP" token.

The scam involved promoting a supposed Pumpfun governance token and another token named "GPT-4.5".

Pump.fun, a Solana-based platform, allows users to create and trade memecoins and has been criticized for enabling pump-and-dump schemes.

The hack was publicly acknowledged by Pump.fun via their Telegram channel, advising users to avoid interacting with the compromised account.

The breach underscores the ongoing security challenges in the cryptocurrency sector.

Details on how the breach occurred were not disclosed, but further updates are expected as the investigation progresses.

The incident has potential implications for the integrity and security practices of emerging cryptocurrency platforms.