Solana-based Pump.fun regains control of its X page after brief hijack

Pump.fun regained control of its X account after a brief takeover by unknown attackers.

Hackers briefly accessed the X page of the Solana meme launchpad, using the platform to promote scam meme tokens in a series of posts.

Renowned blockchain investigator ZachXBT was the first to warn users about the breach, advising traders not to click any links or trade the meme tokens posted by the attackers.

In one of the now-deleted posts, the hackers attempted to deceive investors into purchasing a fake Pump.fun governance token. The platform does not have a native token and only facilitates the quick creation of Solana-based cryptocurrencies.

Pump.fun had fully regained control of its X account by the time of publication. It remains unclear if meme traders suffered any losses from the incident.

Recurring issue

This wasn’t the first social media hack orchestrated by the same bad actors, ZachXBT noted on his official Telegram channel. “The PumpDotFun X account compromise is directly connected on-chain to the Jupiter DAO Feb 2025 & DogWifCoin Nov 2024 X account compromises.” ZachXBT wrote.

Network of addresses linking Pump.fun, DogWifCoin and Jupiter X hacks | Source: ZachXBT on Telegram

Several X accounts have been hijacked in recent months. Attackers typically take control of popular accounts, post fraudulent contract addresses, and attempt to steal funds from unsuspecting users.

“It is likely not the fault of either the Pump Fun or Jupiter teams,” ZachXBT noted. According to the blockchain investigator, it’s likely a “ threat actor is social engineering employees at X with fraudulent documents/emails or a panel is being exploited.”