Pump.fun halts trading after suffering flash loan exploit Assad Jafri · 10 hours ago · 1 min read
Pump.fun halts trading after suffering flash loan exploit
The hacker stole approximately 12,000 SOL — equivalent to roughly $2 million.

Cover art/illustration via CryptoSlate. Image includes combined content which may include AI-generated content.
Solana-based DeFi memecoin platform Pump.fun experienced a significant breach on May 16 when an exploiter apparently utilized flash loans to manipulate the platform’s bonding curve contracts.
The platform has since paused all trading activities.
In a statement on social media, Pump.fun acknowledged the exploit and assured users that the platform is investigating the issue. The team wrote:
“We have upgraded the contracts so the attacker cannot siphon any more funds. The TVL in the protocol right now is safe. We’ve paused trading — you cannot buy and sell any coins at the moment. Any coins that are currently in the process of migrating to Raydium cannot be traded and will not be migrating for an indefinite period of time.”
Industry experts, including Wintermute head of research Igor Igamberdiev, suggested that a key had been compromised, raising the possibility of an inside job. He estimated the loss to be at least 12,000 SOL, equivalent to roughly $2 million.
An account on X, identified as STACCoveflow, claimed responsibility for the attack shortly after the exploit broke in the news. Stacc hinted at a larger motive in their posts, stating:
“I’m about to change the course of history.”
He implied that he did not intend to keep the stolen funds but planned to redistribute the “remaining balances of bonding curves” to certain token users. The exact method Stacc used to execute the attack remains unclear, and it is unknown if the balances are indeed being distributed to other users.
The account allegedly belongs to a doxxed developer who previously worked on Pump.fun. Additionally, several accounts claimed that Stacc had airdropped the stolen SOL to holders of four different coins.
However, CryptoSlate was unable to verify the claims on social media as of press time.
Author
Assad Jafri
Editor & Reporter at CryptoSlate
AJ, a passionate journalist since Yemen’s 2011 Arab Spring, has honed his skills worldwide for over a decade. Specializing in financial journalism, he now focuses on crypto reporting.
Editor Editor
News Desk
Editor at CryptoSlate
CryptoSlate is a comprehensive and contextualized source for crypto news, insights, and data. Focusing on Bitcoin, macro, DeFi and AI.
Latest Solana Stories
Latest Alpha Market Report
Latest Press Releases
Disclaimer: Our writers’ opinions are solely their own and do not reflect the opinion of CryptoSlate. None of the information you read on CryptoSlate should be taken as investment advice, nor does CryptoSlate endorse any project that may be mentioned or linked to in this article. Buying and trading cryptocurrencies should be considered a high-risk activity. Please do your own due diligence before taking any action related to content within this article. Finally, CryptoSlate takes no responsibility should you lose money trading cryptocurrencies.