Solana Memecoin 平台 Pump.fun 指控前员工利用价值 200 万美元的资金

Solana memecoins 平台 Pump.fun 指控一名前员工通过“联合曲线”攻击利用该平台获利 190 万美元。犯罪者利用特权访问来操纵协议的流动性，从 Raydium 借入资金并用它们在 Pump.fun 上购买代币，然后用获得的流动性偿还贷款。

Solana Memecoin Platform Pump.fun Alleges $2 Million Exploitation by Former Employee

Solana Memecoin 平台 Pump.fun 指控前员工剥削 200 万美元

In a startling revelation, Solana-based memecoin creation tool, Pump.fun, has publicly accused a former employee of exploiting the platform for approximately $2 million through a meticulously executed "bonding curve" attack.

令人震惊的消息是，基于 Solana 的 memecoin 创建工具 Pump.fun 公开指控一名前员工通过精心执行的“联合曲线”攻击利用该平台获取约 200 万美元的利益。

Details of the Exploit

漏洞利用的详细信息

According to Pump.fun's official statement released on May 16, the perpetrator, allegedly an ex-employee, exploited their privileged access to a "withdraw authority" mechanism, enabling them to manipulate the platform's internal systems.

根据 Pump.fun 5 月 16 日发布的官方声明，肇事者据称是一名前雇员，利用其特权访问“撤回权限”机制，使他们能够操纵平台的内部系统。

The attack unfolded strategically. The individual leveraged flash loans from Raydium, a Solana lending protocol, to acquire a substantial amount of Solana tokens. These tokens were then utilized to purchase as many memecoins as possible on Pump.fun.

进攻是战略性展开的。该个人利用 Solana 借贷协议 Raydium 的闪电贷来获取大量 Solana 代币。然后，这些代币被用来在 Pump.fun 上购买尽可能多的模因币。

As these memecoins reached their maximum value on their respective bonding curves, the exploiter accessed the liquidity within the bonding curves to repay the flash loans, leaving them with a net profit of approximately 12,300 SOL, valued at $1.9 million at the time of the incident. The entire operation was confined to a short window between 3:21 pm and 5:00 pm UTC on May 16.

当这些模因币在各自的联合曲线上达到最大值时，剥削者利用联合曲线内的流动性来偿还闪电贷，从而获得约 12,300 SOL 的净利润，在事件发生时价值 190 万美元。整个操作仅限于世界标准时间 5 月 16 日下午 3:21 至下午 5:00 之间的一个短暂窗口内。

Platform Response and Investigations

平台响应和调查

Following the discovery of the attack, Pump.fun promptly suspended trading on its platform. However, trading has since resumed. The platform has provided assurances that its smart contracts remain intact and that affected users will receive a full refund of their liquidity within 24 hours.

发现攻击后，Pump.fun 立即暂停了其平台上的交易。不过，交易已恢复。该平台已保证其智能合约保持完整，并且受影响的用户将在 24 小时内获得流动性全额退款。

Igor Igamberdiev, Head of Research at Wintermute, a prominent cryptocurrency market maker, initially suggested that the hack could be attributed to the leak of an internal private key, implicating a specific Pump.fun user known as "STACCoverflow." A series of cryptic posts by STACCoverflow seemingly acknowledged their involvement, expressing a nonchalant attitude towards the consequences and stating that they were "already fully doxxed."

著名加密货币做市商 Wintermute 的研究主管 Igor Igamberdiev 最初表示，这次黑客攻击可能是由于内部私钥泄露造成的，这涉及到一个名为“STACoverflow”的特定 Pump.fun 用户。 STACCoverflow 发布的一系列神秘帖子似乎承认了他们的参与，对后果表示了漠不关心的态度，并表示他们“已经完全被人肉搜索”。

Pump.fun has confirmed that it is closely collaborating with law enforcement authorities in their investigation but has refrained from disclosing the identity of the former employee involved. The platform has also not responded to immediate requests for further clarification.

Pump.fun 已证实正在与执法部门密切合作进行调查，但没有透露涉案前员工的身份。该平台也没有立即回应进一步澄清的请求。

Market Impact and Lessons Learned

市场影响和经验教训

The Pump.fun exploit has sent shockwaves through the cryptocurrency community, highlighting the ongoing vulnerabilities associated with DeFi (decentralized finance) platforms. The incident underscores the critical need for comprehensive security measures and stringent internal controls within DeFi protocols.

Pump.fun 漏洞在加密货币社区引起了轩然大波，凸显了与 DeFi（去中心化金融）平台相关的持续漏洞。该事件凸显了 DeFi 协议中迫切需要全面的安全措施和严格的内部控制。

As the investigation continues, it is imperative that lessons are learned to enhance the overall security posture of the emerging DeFi ecosystem. Robust risk management frameworks, thorough code audits, and robust governance mechanisms are crucial to prevent similar incidents in the future.

随着调查的继续，必须吸取教训以增强新兴 DeFi 生态系统的整体安全态势。强大的风险管理框架、彻底的代码审计和强大的治理机制对于防止未来发生类似事件至关重要。