Back to cases
HIGH2026-03solana-native
BONK.fun reported domain hijack and wallet drainer
BONK.fun warned users that the launchpad domain had been compromised and a malicious prompt had been pushed to connected wallets. The case is a frontend-drainer example rather than a token-liquidity rug.
Date: 2026-03-12Reported amount: Limited reported user losses; examples included 10 to 50 SOL claims
PARTIAL LIVE + FALLBACK
Legend
Victim / sourceSuspect candidateTransactionProtocol / programPattern memoryCandidate txsNeeds review
Graph controls