基于 Solana 的 Pump.fun 代币发行平台遭到复杂的闪电贷攻击

据报道，基于 Solana 的代币发行平台 Pump.fun 已通过对其联合曲线的闪电贷款操纵而被利用。由于交易流程存在漏洞，该平台的米姆币被无付款购买。该利用者后来声称对此负责，他利用借来的资金来填充联合曲线，这可能会影响 Solana meme 币生态系统。专家们正在密切关注这一情况，因为 Pump.fun 是该市场的主要参与者，而利用者 Stacc 表示，利用该漏洞获得的资金将分配给 Solana 社区中选定的代币和 NFT 持有者。

Solana-Based Token Launch Platform Pump.fun Exploited Through Flash Loans

通过闪电贷利用基于 Solana 的代币发行平台 Pump.fun

An ongoing investigation has uncovered an audacious exploit on the Solana-based platform Pump.fun. The platform, known for facilitating token launches, has reportedly fallen victim to a sophisticated attack involving flash loans.

一项正在进行的调查发现了基于 Solana 的 Pump.fun 平台上的大胆漏洞。据报道，该平台以促进代币发行而闻名，但已成为涉及闪贷的复杂攻击的受害者。

Concerned voices within the crypto community raised the alarm, flagging suspicious activities on the platform. The Gotbit Hedge Fund issued a warning via social media, stating, "Pumpfun might be under attack. This wallet: [Solscan link] is buying all tokens on Pumpfun within minutes to fill bonding curve to 100%. Raydium listing stuck."

加密货币社区内的担忧声音拉响了警报，标记了平台上的可疑活动。 Gotbit 对冲基金通过社交媒体发出警告，称“Pumpfun 可能受到攻击。这个钱包：[Solscan 链接] 将在几分钟内购买 Pumpfun 上的所有代币，以将联合曲线填充到 100%。Raydium 上市陷入困境。”

The perpetrator of the exploit has been identified by the pseudonym Stacc. According to social media reports, Stacc exploited a crypto loan service to acquire a substantial amount of Solana (SOL) tokens. These tokens were then used to purchase Pump.fun's meme coins without any actual payment. The exploitative nature of the transaction allowed Stacc to retain the tokens even after failing to fulfill the loan terms.

该漏洞的肇事者已被确定为化名 Stacc。据社交媒体报道，Stacc 利用加密贷款服务获取了大量 Solana (SOL) 代币。然后，这些代币被用来购买 Pump.fun 的 meme 币，而无需任何实际付款。该交易的剥削性质使得 Stacc 即使在未能履行贷款条款后仍保留了代币。

"What I've been able to figure out is that only one project has gone to Raydium so far and his bag is currently worth approximately 1,000 SOL ($157,000) which he hasn't sold any yet," explained SOLCircle, a user on the social media platform X, describing the situation.

“我了解到的是，到目前为止，只有一个项目进入了 Raydium，他的包目前价值约 1,000 SOL（157,000 美元），但他还没有出售任何东西，”SOLCircle 上的一位用户解释道。社交媒体平台X描述了情况。

Exploiter Admits Responsibility

剥削者承认责任

In a brazen admission of culpability, Stacc himself has taken ownership of the exploit through a social media post. He cited personal grievances, including the tragic loss of his mother, as contributing factors to his motivation.

斯塔克本人通过社交媒体帖子厚颜无耻地承认了自己的过失。他列举了个人的不满，包括母亲的不幸去世，作为他的动机的促成因素。

Market Fallout

市场影响

Experts are expressing concern over the potential repercussions of this exploit on Solana's meme coin ecosystem. Pump.fun is regarded as a prominent player in this market, and the breach raises concerns about the stability and trustworthiness of the sector.

专家们对这一漏洞对 Solana 模因币生态系统的潜在影响表示担忧。 Pump.fun 被认为是该市场的知名参与者，此次违规事件引发了对该行业稳定性和可信度的担忧。

"This event could have far-reaching consequences for the meme coin market on Solana," noted industry analyst Jared Williams. "Investors may become wary of participating in projects that rely on bonding curves, given the demonstrated vulnerability to manipulation."

行业分析师 Jared Williams 指出：“这一事件可能会对 Solana 上的 meme 币市场产生深远的影响。” “鉴于已证明的脆弱性，投资者可能会对参与依赖联合曲线的项目变得谨慎。”

Distribution of Exploited Funds

动用资金分配情况

Remarkably, Stacc has reportedly indicated that the funds acquired through the exploit will be redistributed to select token and NFT holders in the Solana community.

值得注意的是，据报道，Stacc 表示，通过该漏洞获取的资金将被重新分配给 Solana 社区中选定的代币和 NFT 持有者。

"And so this wee lil script is sending the remaining balances of bonding curves via pRNG to 1. slerf holders 2. stacc holders 3. saga holders 4. risklol holders," wrote Stacc, explaining the distribution plan. "This ~80m airdrop may cause a Solana fork n it may cause an awful lot of sourpuss rich kids everywhere but it certainly stops the evil here."

“所以这个小脚本通过 pRNG 将联合曲线的剩余余额发送给 1.slerf 持有者 2.stacc 持有者 3.saga 持有者 4.risklol 持有者，”Stacc 在解释分配计划时写道。 “这个大约 80m 的空投可能会导致 Solana 分叉，也可能会导致各地出现大量脾气暴躁的富家子弟，但它肯定会阻止这里的邪恶。”

Ongoing Investigation and Community Response

正在进行的调查和社区反应

The Pump.fun team and the wider crypto community are closely monitoring the situation, assessing the full implications of the exploit and exploring potential countermeasures.

Pump.fun 团队和更广泛的加密社区正在密切监视局势，评估该漏洞的全面影响并探索潜在的对策。

"We are aware of the recent incident involving Pump.fun and are actively investigating the matter," stated a spokesperson for the Pump.fun team. "We are committed to protecting our users and ensuring the integrity of our platform."

Pump.fun 团队的发言人表示：“我们注意到最近发生的涉及 Pump.fun 的事件，并正在积极调查此事。” “我们致力于保护我们的用户并确保我们平台的完整性。”

The exploit has sparked a lively debate within the blockchain community, with experts and enthusiasts discussing the implications of bonding curve manipulation and the need for enhanced security measures.

该漏洞在区块链社区内引发了激烈的争论，专家和爱好者讨论了联合曲线操纵的影响以及增强安全措施的必要性。

"This incident underscores the challenges of balancing innovation with risk management in decentralized finance," said Adam Back, CEO of Blockstream. "Developers and investors alike must remain vigilant against such attacks and work together to strengthen the resilience of the ecosystem."

Blockstream 首席执行官 Adam Back 表示：“这一事件凸显了去中心化金融中平衡创新与风险管理所面临的挑战。” “开发商和投资者都必须对此类攻击保持警惕，并共同努力增强生态系统的弹性。”

As the investigation continues, it remains to be seen whether the Pump.fun exploit will prompt regulatory scrutiny or inspire new approaches to protect crypto platforms from similar vulnerabilities.

随着调查的继续，Pump.fun 漏洞是否会引发监管审查或激发新方法来保护加密平台免受类似漏洞的影响还有待观察。