Pump.fun, a popular Solana-based platform for creating and trading meme coins, had its X account hacked on February 26, 2025. The hackers used the compromised account to promote a fraudulent token called “PUMP,” claiming it was the official governance token of Pump.fun. The fake post read, “Introducing $PUMP the OFFICIAL pump.fun GOVERNANCE token, where Democracy has never been this degen.
We will also be REWARDING our OG DEGENS.” The hackers, who identified themselves as “GPT-4.5,” threatened to delete the Pump.fun X account if the token reached a $100 million market cap. Despite warnings that the token’s supply was heavily concentrated among a small group of wallets, the PUMP token briefly reached a $5 million market cap before rapidly crashing. The Pump.fun team acknowledged the breach and advised users not to interact with the compromised account.
Alon Cohen, co-founder of Pump.fun, stated that all security protocols had been followed and suggested that the hack might have been caused by an issue within X itself.
Pump.fun account security breach
The hackers continued to promote additional scam tokens, such as “hackeddotfun” and “HACKED,” using the compromised account.
Pump.fun has been one of the most active platforms for launching Solana-based meme coins, with over 8 million tokens deployed since its launch in January 2024. However, the platform has faced controversies, including the LIBRA token launch in Argentina that led to a $107 million rug pull. On-chain investigator ZachXBT connected the Pump.fun hack to similar attacks on Jupiter DAO and DogWifCoin, speculating that social engineering tactics were likely used to compromise the X accounts.
He emphasized that neither the Pump.fun nor the Jupiter DAO teams were at fault. The incident highlights the ongoing cybersecurity risks in the cryptocurrency space, where hackers exploit vulnerabilities to promote fraudulent tokens and scam unsuspecting users. As of this writing, the Pump.fun team is still working to regain control of their X account and prevent further scams from reaching their followers.
