Pump.fun, a Solana-based meme coin platform, experienced a suspected compromise of its official X account, @pumpdotfun, after user reports of scam token promotions linked to the breach emerged. On Feb. 26, 2025, multiple X users flagged unusual activity on the account, including a post promoting tokens with contract addresses that were later deleted. Onchain analyst ZachXBT flagged the incident as well, writing on Telegram: "Community Alert: Pumpdotfun X/Twitter account is currently compromised do not click engage with posts or click links."
Incident Details
Pump.fun’s X account serves as its primary communication channel for its platform, which has facilitated millions of meme token launches. The incident follows a May 2024 exploit in which a former employee drained 12,300 SOL ($1.9 million) via a “bonding curve” vulnerability, prompting temporary trading halts. A swathe of X users have warned that the platform’s participants are urged to avoid engaging with @pumpdotfun promotions until an official statement is released. Experts advise investors to verify token addresses and liquidity pools independently before transacting.
Onchain Links
The platform has not yet confirmed the breach and the X account Bubblemaps reports that the token launched called “$PUMP” is “heavily bundled and will dump.” As of 11 a.m. Eastern Time on Feb. 26, the @pumpdotfun page displays only three select posts, with the now-deleted X post conspicuously absent. Moreover, ZachXBT claims the breach is associated with compromises tied to Jupiter DAO and Dogwifcoin last year: “The Pumpdotfun X account compromise is directly connected onchain to the Jupiter DAO Feb 2025 & Dogwifcoin Nov. 2024 X account compromises.”
Impact and Advice
This incident underscores the importance of securing centralized social media accounts for crypto projects. Pump.fun has yet to release an official statement. Users are advised to remain vigilant, avoid clicking suspicious links, and await confirmation from alternative trusted channels such as the official website or community Telegram groups. Monitoring related token contract addresses is also recommended to prevent financial losses.