Home
Cryptocurrency
Cryptocurrency News
Bonk.fun Domain Hijacked in Wallet Drainer Attack Designed to Target Solana Users

Bonk.fun Domain Hijacked in Wallet Drainer Attack Designed to Target Solana Users

Users warned not to interact with the compromised Bonk.fun site after a malicious prompt drained crypto wallets.

Written by Rahul Dhingra, Edited by David Delima | Updated: 12 March 2026 16:11 IST

Bonk.fun Domain Hijacked in Wallet Drainer Attack Designed to Target Solana Users

Photo Credit: Unsplash/Jefferson Santos

Bonk.fun warns users after hackers deploy wallet drainer on its website

Click Here to Add Gadgets360 As A Trusted Source

Highlights

Bonk.fun warns users after attackers compromise its domain
Fake terms message used to trigger malicious wallet approvals
Some users report losses after interacting with the site

The website of Solana-based token launch platform Bonk.fun was hijacked by hackers who deployed a malicious wallet drainer designed to steal cryptocurrency from users. The platform warned the users not to interact with the website after the breach was discovered. As per the reports, after the attackers gained access to the domain, they managed to insert a fraudulent prompt that tricked users into signing a transaction that could drain funds from connected wallets. This incident shows the growing security risks that decentralised platforms and cryptocurrency users face.

Malicious Prompt Used to Trick Users Into Signing Fraudulent Transactions

The hackers managed to compromise a team-associated account linked to the Bonk.fun platform first. The attackers, having access to the account, were able to alter the website and display a fake “Terms of Service” message. Users unaware of the repercussions approved a malicious transaction that allowed the attackers to withdraw funds from their accounts. Later, the Bonk.fun team urged users to avoid visiting the site until the platform's security is fully restored.

A malicious actor has compromised the BONKfun domain, do not interact with the website until we have secured everything.
— BONK.fun (@bonkfun) March 12, 2026

In a post on X, the project operator Tom confirmed that the platform security is breached and said, “Do not use the bonk.fun domain until further notice”. Even though the platform said that the impact appeared limited because the breach was caught relatively quickly, many users reported losses after interacting with the compromised site.

Do not use the https://t.co/4xXs3cMJx0 domain until further notice, hackers have hijacked a team account forcing a drainer on the DOMAIN.

URGENT.
— Tom (@SolportTom) March 12, 2026

A user reported that their wallet had been depleted of approximately 50 Solana SOL, or $86.12 (roughly Rs. 8,000), while another claimed to have lost roughly 10 SOL. A greater number of users reported different losses.

This incident comes at a time when phishing and social engineering attacks continue to target cryptocurrency users. Recently, security researchers warned about the “ClickFix” scam, in which hackers posed as meeting participants during fake Zoom calls to trick crypto executives into installing malicious software. By gaining access to wallets, private keys, or sensitive credentials, these attacks seek to compromise cryptocurrency platforms or steal digital assets.

Such incidents highlight the importance of verifying wallet approvals and avoiding suspicious prompts when interacting with decentralised applications. Before signing transactions with cryptocurrency wallets, users are frequently urged to carefully review the transaction permissions. A growing decentralised ecosystem calls for more attacks, targeting users and platforms, therefore increasing the need for stronger security practices across the industry.

Cryptocurrency is an unregulated digital currency, not a legal tender and subject to market risks. The information provided in the article is not intended to be and does not constitute financial advice, trading advice or any other advice or recommendation of any sort offered or endorsed by NDTV. NDTV shall not be responsible for any loss arising from any investment based on any perceived recommendation, forecast or any other information contained in the article.

Comments

Get your daily dose of tech news, reviews, and insights, in under 80 characters on Gadgets 360 Turbo. Connect with fellow tech lovers on our Forum. Follow us on X, Facebook, WhatsApp, Threads and Google News for instant updates. Catch all the action on our YouTube channel.

Further reading: Crypto Hack, Cryptocurrency, Solana

Rahul Dhingra

Email Rahul Dhingra

Rahul Dhingra is a crypto writer at Gadgets 360, where he covers the exciting world of Cryptocurrency, Blockchain, Defi and Web3. Before joining Gadgets 360, he worked as a content specialist for a European-based Crypto Exchange. Rahul loves storytelling, not just through the written word but also through the visual medium. Beyond his professional life, Rahul is a sports fanatic. Whether it’s cricket or football, his passion for the game is contagious. More