基於 Solana 的 Pump.fun 代幣發行平台遭到複雜的閃電貸攻擊

據報道，基於 Solana 的代幣發行平台 Pump.fun 已通過對其聯合曲線的閃電貸款操縱而被利用。由於交易流程存在漏洞，該平台的米姆幣被無付款購買。該利用者後來聲稱對此負責，他利用借來的資金來填充聯合曲線，這可能會影響 Solana meme 幣生態系統。專家們正在密切關注這一情況，因為 Pump.fun 是該市場的主要參與者，而利用者 Stacc 表示，利用漏洞獲得的資金將分配給 Solana 社群中選定的代幣和 NFT 持有者。

Solana-Based Token Launch Platform Pump.fun Exploited Through Flash Loans

透過閃電貸利用基於 Solana 的代幣發行平台 Pump.fun

An ongoing investigation has uncovered an audacious exploit on the Solana-based platform Pump.fun. The platform, known for facilitating token launches, has reportedly fallen victim to a sophisticated attack involving flash loans.

一項正在進行的調查發現了基於 Solana 的 Pump.fun 平台上的大膽漏洞。據報道，該平台以促進代幣發行而聞名，但已成為涉及閃貸的複雜攻擊的受害者。

Concerned voices within the crypto community raised the alarm, flagging suspicious activities on the platform. The Gotbit Hedge Fund issued a warning via social media, stating, "Pumpfun might be under attack. This wallet: [Solscan link] is buying all tokens on Pumpfun within minutes to fill bonding curve to 100%. Raydium listing stuck."

加密貨幣社群內的擔憂聲音拉響了警報，標記了平台上的可疑活動。 Gotbit 對沖基金透過社群媒體發出警告，稱「Pumpfun 可能受到攻擊。這個錢包：[Solscan 連結] 將在幾分鐘內購買Pumpfun 上的所有代幣，以將聯合曲線填充到100%。Raydium 上市陷入困境。 」

The perpetrator of the exploit has been identified by the pseudonym Stacc. According to social media reports, Stacc exploited a crypto loan service to acquire a substantial amount of Solana (SOL) tokens. These tokens were then used to purchase Pump.fun's meme coins without any actual payment. The exploitative nature of the transaction allowed Stacc to retain the tokens even after failing to fulfill the loan terms.

該漏洞的肇事者已被確定為化名 Stacc。根據社群媒體報道，Stacc 利用加密貸款服務獲取了大量 Solana (SOL) 代幣。然後，這些代幣被用來購買 Pump.fun 的 meme 幣，而無需任何實際付款。該交易的剝削性質使得 Stacc 即使在未能履行貸款條款後仍保留了代幣。

"What I've been able to figure out is that only one project has gone to Raydium so far and his bag is currently worth approximately 1,000 SOL ($157,000) which he hasn't sold any yet," explained SOLCircle, a user on the social media platform X, describing the situation.

「我了解到的是，到目前為止，只有一個項目進入了 Raydium，他的包目前價值約 1,000 SOL（157,000 美元），但他還沒有出售任何東西，」SOLCircle 上的一位用戶解釋道。媒體平台X描述了情況。

Exploiter Admits Responsibility

剝削者承認責任

In a brazen admission of culpability, Stacc himself has taken ownership of the exploit through a social media post. He cited personal grievances, including the tragic loss of his mother, as contributing factors to his motivation.

史塔克本人透過社群媒體貼文厚顏無恥地承認了自己的過失。他列舉了個人的不滿，包括母親的不幸過世，作為他的動機的促成因素。

Market Fallout

市場影響

Experts are expressing concern over the potential repercussions of this exploit on Solana's meme coin ecosystem. Pump.fun is regarded as a prominent player in this market, and the breach raises concerns about the stability and trustworthiness of the sector.

專家們對此漏洞對 Solana 迷因幣生態系統的潛在影響表示擔憂。 Pump.fun 被認為是該市場的知名參與者，這次違規事件引發了對該行業穩定性和可信度的擔憂。

"This event could have far-reaching consequences for the meme coin market on Solana," noted industry analyst Jared Williams. "Investors may become wary of participating in projects that rely on bonding curves, given the demonstrated vulnerability to manipulation."

行業分析師 Jared Williams 指出：“這一事件可能會對 Solana 上的 meme 幣市場產生深遠的影響。” “鑑於已證明的脆弱性，投資者可能會對參與依賴聯合曲線的項目變得謹慎。”

Distribution of Exploited Funds

動用資金分配狀況

Remarkably, Stacc has reportedly indicated that the funds acquired through the exploit will be redistributed to select token and NFT holders in the Solana community.

值得注意的是，據報道，Stacc 表示，透過該漏洞獲得的資金將重新分配給 Solana 社群中選定的代幣和 NFT 持有者。

"And so this wee lil script is sending the remaining balances of bonding curves via pRNG to 1. slerf holders 2. stacc holders 3. saga holders 4. risklol holders," wrote Stacc, explaining the distribution plan. "This ~80m airdrop may cause a Solana fork n it may cause an awful lot of sourpuss rich kids everywhere but it certainly stops the evil here."

「所以這個小腳本透過 pRNG 將聯合曲線的剩餘餘額發送給 1.slerf 持有者 2.stacc 持有者 3.saga 持有者 4.risklol 持有者，」Stacc 在解釋分配計劃時寫道。 「這個大約 80m 的空投可能會導致 Solana 分叉，也可能會導致各地出現大量脾氣暴躁的富家子弟，但它肯定會阻止這裡的邪惡。”

Ongoing Investigation and Community Response

正在進行的調查和社區反應

The Pump.fun team and the wider crypto community are closely monitoring the situation, assessing the full implications of the exploit and exploring potential countermeasures.

Pump.fun 團隊和更廣泛的加密社群正在密切監視局勢，評估該漏洞的全面影響並探索潛在的對策。

"We are aware of the recent incident involving Pump.fun and are actively investigating the matter," stated a spokesperson for the Pump.fun team. "We are committed to protecting our users and ensuring the integrity of our platform."

Pump.fun 團隊的發言人表示：“我們注意到最近發生的涉及 Pump.fun 的事件，並正在積極調查此事。” “我們致力於保護我們的用戶並確保我們平台的完整性。”

The exploit has sparked a lively debate within the blockchain community, with experts and enthusiasts discussing the implications of bonding curve manipulation and the need for enhanced security measures.

該漏洞在區塊鏈社群內引發了激烈的爭論，專家和愛好者討論了聯合曲線操縱的影響以及增強安全措施的必要性。

"This incident underscores the challenges of balancing innovation with risk management in decentralized finance," said Adam Back, CEO of Blockstream. "Developers and investors alike must remain vigilant against such attacks and work together to strengthen the resilience of the ecosystem."

Blockstream 執行長 Adam Back 表示：“這一事件凸顯了去中心化金融中平衡創新與風險管理所面臨的挑戰。” “開發商和投資者都必須對此類攻擊保持警惕，並共同努力增強生態系統的彈性。”

As the investigation continues, it remains to be seen whether the Pump.fun exploit will prompt regulatory scrutiny or inspire new approaches to protect crypto platforms from similar vulnerabilities.

隨著調查的持續，Pump.fun 漏洞是否會引發監管審查或激發新方法來保護加密平台免受類似漏洞的影響還有待觀察。