BONKfun website hijacked and restored; team to compensate users 110%

iconPANews
Share
Share IconShare IconShare IconShare IconShare IconShare IconCopy
AI summary iconSummary

expand icon
On March 21, BONKfun announced that its official website was compromised on March 11 via a social engineering attack, with attackers redirecting the domain through the domain registrar to an external registrar. No internal systems or accounts were breached. The team acted swiftly, taking the site offline and notifying wallet providers to flag it as malicious. Total losses amounted to approximately $30,000, and the team pledged 110% compensation to affected users. Domain control was fully restored by March 18, and wallet functionalities were reinstated by March 19. Some antivirus tools continue to flag the main domain, so a fully functional backup site has been launched. This is a key update in on-chain and crypto news.

PANews, March 21: BONKfun announced on X that its website was targeted by a malicious social engineering attack on March 11, during which attackers hijacked the BONKfun domain through their domain registrar and transferred it to an external registrar. The team confirmed that this incident did not result from any compromise of BONK or BONKfun’s internal systems, code repositories, or team accounts. Immediately following the incident, the team took swift action: shutting down the website, coordinating with wallet service providers to flag the domain as malicious, and limiting user impact. The attack resulted in approximately $30,000 in customer losses, and the team will compensate affected users at 110% to cover potential opportunity costs. Full control of the BONKfun domain and its registration was restored around 5:00 PM Eastern Time on March 18. Core wallet provider functionalities were restored by the evening of March 19, and the website has since been safely relaunched. Currently, some antivirus software still flags the main domain as risky; the team is actively addressing this issue. For users unable to access the official website due to antivirus restrictions, a backup domain with identical functionality to the main site has been activated and is available for use.

Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information. Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.