基于 Solana 的 Meme Coin Launchpad Pump.fun 被黑客攻击，损失 190 万美元

基于 Solana 的 meme 代币启动平台 Pump.fun 成为一名前员工利用该漏洞的受害者，导致价值约 190 万美元的 SOL 被盗用。该漏洞涉及通过闪电贷操纵债券曲线，导致交易暂时停止。被盗的代币目前处于困境且无法交易。

Pump.fun Meme Coin Launchpad Falls Victim to Insider Exploit, Over $1.9 Million Siphoned

Pump.fun Meme Coin Launchpad 成为内部人利用的受害者，超过 190 万美元被盗走

Solana-based meme coin launchpad Pump.fun has become the latest victim of a malicious insider exploit, resulting in the misappropriation of approximately 12,300 SOL, valued at roughly $1.9 million at the time of the incident.

基于 Solana 的 Meme 代币启动板 Pump.fun 已成为恶意内部漏洞的最新受害者，导致约 12,300 SOL 被盗用，事件发生时价值约 190 万美元。

Insider Access, Flash Loan Abuse

内部访问、闪电贷滥用

According to Pump.fun's official announcement, a former employee exploited their "privileged position" to gain unauthorized access to "withdraw authority" within the platform's systems. This illicit access allowed the perpetrator to execute a sophisticated attack utilizing flash loans from a Solana lending protocol.

据Pump.fun官方公告称，一名前员工利用其“特权地位”未经授权访问平台系统内的“撤权”。这种非法访问使犯罪者能够利用 Solana 借贷协议的闪贷执行复杂的攻击。

The former employee borrowed SOL via flash loans and then purchased targeted meme coins on Pump.fun, artificially inflating their bonding curves to reach 100%. This maneuver enabled them to drain liquidity from the bonding curves and repay the flash loans, leaving the platform with a substantial loss.

这名前员工通过闪电贷借了 SOL，然后在 Pump.fun 上购买了目标模因币，人为地将他们的联合曲线推高至 100%。这一举措使他们能够从联合曲线中抽走流动性并偿还闪电贷款，从而使平台遭受重大损失。

Immediate Response, Platform Suspension

立即响应，平台暂停

Upon detecting the exploit, Pump.fun promptly halted trading operations and swiftly initiated contract updates to prevent further damage. Out of the platform's total liquidity of $45 million, approximately $1.9 million was compromised in the attack.

在检测到该漏洞后，Pump.fun 立即停止了交易操作，并迅速启动了合约更新，以防止进一步的损害。该平台总流动资金为 4500 万美元，其中约 190 万美元在此次攻击中受损。

Reparations and Future Enhancements

赔偿和未来的改进

To compensate affected users, the Pump.fun team has pledged to replenish liquidity pools for the targeted coins with an equivalent or greater amount of SOL within 24 hours. The coins that reached 100% during the exploit will remain temporarily untradeable until liquidity pools are re-established on Raydium, a Solana lending protocol.

为了补偿受影响的用户，Pump.fun团队承诺在24小时内为目标币种补充等值或更多的SOL流动性池。在利用该漏洞期间达到 100% 的代币将暂时无法交易，直到在 Solana 借贷协议 Raydium 上重新建立流动性池。

The team is actively collaborating with renowned security experts to both minimize the impact of the incident and implement robust measures to prevent future vulnerabilities. They emphasized their commitment to ensuring the safety and integrity of the platform for all users.

该团队正在与知名安全专家积极合作，以尽量减少事件的影响，并采取强有力的措施来防止未来出现漏洞。他们强调了确保所有用户平台安全和完整性的承诺。

Internal Insider Suspected

涉嫌内部知情人

Prior to Pump.fun's official announcement, Igor Igamberdiev, Head of Research at cryptocurrency market maker Wintermute, attributed the exploit to an internal private key leak and implicated X user "STACCoverflow" as a potential suspect.

在 Pump.fun 正式宣布之前，加密货币做市商 Wintermute 研究主管 Igor Igamberdiev 将此次漏洞归因于内部私钥泄露，并暗示 X 用户“STACoverflow”是潜在嫌疑人。

Subsequently, an X user known as "Stacc" confessed to executing the exploit, criticizing the "horrible bosses" at Pump.fun and questioning their suitability within the blockchain community.

随后，一位名为“Stacc”的 X 用户承认执行了该漏洞，批评 Pump.fun 的“可怕的老板”，并质疑他们在区块链社区中的适用性。

Wider Implications for the Meme Coin Market

对 Meme 币市场的更广泛影响

The Pump.fun exploit highlights the inherent risks associated with meme coins and the importance of due diligence for investors. While meme coins may offer potential for speculative gains, it is crucial to recognize their volatility and the potential for manipulation.

Pump.fun 漏洞凸显了与模因币相关的固有风险以及投资者尽职调查的重要性。虽然模因币可能提供投机收益的潜力，但认识到其波动性和操纵潜力至关重要。

The incident underscores the need for robust security measures, transparency, and accountability within the rapidly evolving meme coin market. Investors are urged to approach such investments with caution and conduct thorough research before allocating funds.

该事件凸显了快速发展的模因币市场需要强有力的安全措施、透明度和问责制。我们敦促投资者谨慎对待此类投资，并在分配资金之前进行彻底的研究。