A hacker installed a wallet drainer on BONK.fun at 2:20 AM UTC.
Meanwhile, pump.fun users were sleeping soundly. 🛌
The origin server at BONK.fun is not responding — probably because a hacker signed in as a team member, posted a fake Terms of Service, and emptied your wallet while you clicked "agree" at 2AM.
✓ Cloudflare Safe ✗ Your Wallet Not Safe
"Hey everyone, so a hacker kind of... got into a team account... and maybe planted a wallet drainer on our site... but losses are minimal... totally fine... please don't leave... the Cloudflare page is actually really pretty... we're working on it... 🙂"
While the BONK.fun team was presumably asleep, a hacker casually walked into a team account like they owned the place. Because now they kind of did.
"Please sign this Terms of Service to continue." — the most expensive checkbox in memecoin history. Users who signed it got their wallets drained. Classic move.
The team alerts everyone to STAY AWAY from their own website. Peak crypto moment. "Do not visit our site" hits different when you're the site.
Site now shows a safe Cloudflare page. The Cloudflare 522 page is currently the most secure thing BONK has ever shipped. Losses described as "minimal."
Eight months of operation and this is how the community finds out about your security posture. Thousands of users deserved better.
Pump.fun was doing this before BONK.fun was a twinkle in a hacker's eye. No drama. No fake ToS. No Cloudflare placeholder of shame. Just vibes, launches, and functional security.
🚀 GO TO PUMP.FUN (IT'S NOT HACKED)
No wallet drainers were used in the making of this page.
This ToS is fake: by reading this you agree to nothing. You're safe here. 🛡️