Azoundria: Created page with "{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/pumpfun$pumptokenfromtwitterxaccountbreach.php}} {{Unattributed Sources}} Pump Dot Fun Logo/HomepagePump.fun, a Solana-based platform for generating and trading memecoins, had its official X (Twitter) account hacked on February 26, 2025. The attacker used the compromised account to promote a fake governance token called “$PUMP,” falsely claiming it was tie..."

2025-05-09T23:07:09Z

Created page with "{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/pumpfun$pumptokenfromtwitterxaccountbreach.php}} {{Unattributed Sources}} thumb|Pump Dot Fun Logo/HomepagePump.fun, a Solana-based platform for generating and trading memecoins, had its official X (Twitter) account hacked on February 26, 2025. The attacker used the compromised account to promote a fake governance token called “$PUMP,” falsely claiming it was tie..."

New page

{{Imported Case Study With About|source=https://www.quadrigainitiative.com/casestudy/pumpfun$pumptokenfromtwitterxaccountbreach.php}}
{{Unattributed Sources}}

[[File:Pumpfun.jpg|thumb|Pump Dot Fun Logo/Homepage]]Pump.fun, a Solana-based platform for generating and trading memecoins, had its official X (Twitter) account hacked on February 26, 2025. The attacker used the compromised account to promote a fake governance token called “$PUMP,” falsely claiming it was tied to the platform, and threatened to delete the account if the token hit a $100 million market cap. Despite clear signs of manipulation, including concentrated token holdings, $PUMP briefly surged to a $5 million market cap before crashing. The Pump.fun team quickly acknowledged the breach via Telegram, urging users not to interact with the X account. Investigator ZachXBT suggested the incident may be linked to prior high-profile X account hacks and possibly involved social engineering tactics targeting X employees.<ref name="odailynews-19409" /><ref name="pumpfuntweet-19410" /><ref name="bitdefender-19411" /><ref name="bleepingcomputer-19412" /><ref name="dmnews-19413" /><ref name="mitrade-19414" /><ref name="yahoonews-19415" /><ref name="bitdegree-19416" /><ref name="cryptobriefing-19417" /><ref name="zachxbttelegram-19418" /><ref name="solscan-19419" /><ref name="qubitxbttwitter-19420" /><ref name="0xdeepztwitter-19421" /><ref name="memeseusmaximustweet-19422" /><ref name="memestreetbetstwitter-19423" /><ref name="directorvibestwitter-19424" /><ref name="yutibottwitter-19425" /><ref name="stat1xxtwitter-19426" /><ref name="eldaronetwitter-19427" /><ref name="degenrorytwitter-19428" /><ref name="lanacoinaitwitter-19429" /><ref name="kingjameslostwitter-19430" /><ref name="chaingptaitwitter-19431" /><ref name="pinkprintersoltwitter-19432" /><ref name="1moreeetwitter-19433" /><ref name="iamzebulltwitter-19434" /><ref name="0xadvocatustwitter-19435" /><ref name="cyphrgmtwitter-19436" /><ref name="ivolxbttwitter-19437" /><ref name="lanacoinaitwitter-19438" /><ref name="madmixnumtwitter-19439" />

== About Pump.Fun ==
pump.fun is a Solana-based memecoin generator."

"Pump prevents rugs by making sure that all created tokens are safe. Each coin on pump is a fair-launch with no presale and no team allocation. step 1: pick a coin that you like step 2: buy the coin on the bonding curve step 3: sell at any time to lock in your profits or losses step 4: when enough people buy on the bonding curve it reaches a market cap of $69k step 5: $12k of liquidity is then deposited in raydium and burned"
== About Fake $PUMP Token ==
"introducing $PUMP - the official pump.fun GOVERNANCE token, where Democracy has never been this degen. we will be also REWARDING our OG DEGENS. stay tuned for more details"

== The Reality ==
Pump.fun's Twitter/X account was breached by a malicious actor.

== What Happened ==
Pumpfun’s X account was hacked to promote fake tokens, leading to over $100,000 in profits for certain wallets through rapid trading.
{| class="wikitable"
|+Key Event Timeline - Pump.Fun $PUMP Token From Twitter/X Account Breach
!Date
!Event
!Description
|-
|February 26th, 2025 8:29:00 AM MST
|MemeseusMaximus Tweet
|MemeseusMaximus postes the first tweet about the fake $PUMP token on Twitter/X. "@pumpdotfun account compromised, the token is fake."
|-
|February 26th, 2025 9:01:00 AM MST
|lmkfun Tweet Posted
|"Pumpfun account was hacked and launched a token. Although it was confirmed to be fake very quick. Several wallets are still able to profit over $100K by buying/selling within 1 minute."
|}

== Technical Details ==
Pump.fun, a popular Solana-based platform for creating and trading meme coins, had its X account hacked on February 26, 2025. The hackers used the compromised account to promote a fraudulent token called “PUMP,” claiming it was the official governance token of Pump.fun. The fake post read, “Introducing $PUMP the OFFICIAL pump.fun GOVERNANCE token, where Democracy has never been this degen.

We will also be REWARDING our OG DEGENS.” The hackers, who identified themselves as “GPT-4.5,” threatened to delete the Pump.fun X account if the token reached a $100 million market cap. Despite warnings that the token’s supply was heavily concentrated among a small group of wallets, the PUMP token briefly reached a $5 million market cap before rapidly crashing. The Pump.fun team acknowledged the breach and advised users not to interact with the compromised account.

== Total Amount Lost ==
The total amount lost has been estimated at $100,000 USD.

How much was lost and how was it calculated? If there are conflicting reports, which are accurate and where does the discrepancy lie?

== Immediate Reactions ==
Pumpfun has acknowledged the breach, posting on its Telegram channel that users should not interact with the account.

"Our X account is compromised. Do not interact with it. We are investigating," a Pumpfun staff member posted to Telegram.

ZachXBT mentioned in another Telegram post that Pump.fun X account hack could be connected to the Jupiter DAO X account hack this February and DogWifCoin’s hack in November last year. The investigator still insisted that the hacks were possibly not the fault of the teams. ZachXBT further speculated that the threats could be connected to X social engineering employees with fraudulent documents or emails. The investigator also suggested that the exploitation of an X panel could be another probable cause of the compromised accounts.

== Ultimate Outcome ==
"Shortly after the initial scam post, the hackers escalated their efforts by promoting yet another fake token, called "GPT-4.5." while also threatening to delete the Pump.fun X account if the token reached a $100 million market cap, further adding to the chaos and confusion among users."

== Total Amount Recovered ==
There was a report of a hacked.fun token which was to be launched to give victims an opportunity to recover losses.

There do not appear to have been any funds recovered in this case.

== Ongoing Developments ==
There is a likely an ongoing investigation int the perpetrator who appears to have breached multiple Twitter/X accounts.
== Individual Prevention Policies ==
{{Prevention:Individuals:Placeholder}}

{{Prevention:Individuals:End}}

== Platform Prevention Policies ==
{{Prevention:Platforms:Placeholder}}

{{Prevention:Platforms:End}}

== Regulatory Prevention Policies ==
{{Prevention:Regulators:Placeholder}}

{{Prevention:Regulators:End}}

== References ==
<references><ref name="odailynews-19409">[https://www.odaily.news/newsflash/420883 Pumpfun's X Account Hacked, Fake Tokens Promoted—Some Wallets Profit Over $100,000 Through Rapid Trades - ODaily News] (Accessed Apr 28, 2025)</ref>

<ref name="pumpfuntweet-19410">[https://twitter.com/lmkfun/status/1894779929994383646 Pumpfun - "Pumpfun account was hacked and launched a token. Although it was confirmed to be fake very quick. Several wallets are still able to profit over $100K by buying/selling within 1 minute." - Twitter/X] (Accessed Apr 28, 2025)</ref>

<ref name="bitdefender-19411">[https://www.bitdefender.com/en-gb/blog/hotforsecurity/pump-fun-x-account-hacked-to-promote-fake-pump-token-cryptocurrency-scam https://www.bitdefender.com/en-gb/blog/hotforsecurity/pump-fun-x-account-hacked-to-promote-fake-pump-token-cryptocurrency-scam - BitDefender] (Accessed Apr 28, 2025)</ref>

<ref name="bleepingcomputer-19412">[https://www.bleepingcomputer.com/news/security/pumpfun-x-account-hacked-to-promote-scam-governance-token/ Pump.fun X account hacked to promote scam governance token - Bleeping Computer] (Accessed Apr 28, 2025)</ref>

<ref name="dmnews-19413">[https://dmnews.com/pump-fun-x-account-hacked-to-promote-fake-pump-token/ Pump.fun X account hacked to promote fake PUMP token - Daily Motivation News] (Accessed Apr 28, 2025)</ref>

<ref name="mitrade-19414">[https://www.mitrade.com/insights/news/live-news/article-3-663262-20250227 ZachXBT: Hackers compromise Pump.fun X account, issuing fake memecoin announcements - MiTrade] (Accessed Apr 28, 2025)</ref>

<ref name="yahoonews-19415">[https://www.yahoo.com/news/pump-funs-x-account-hacked-082404532.html Pump.fun's X Account Hacked To Promote Fake "PUMP" Token, Triggering $5 Million Market Cap Surge - Yahoo News] (Accessed Apr 28, 2025)</ref>

<ref name="bitdegree-19416">[https://www.bitdegree.org/crypto/news/pump-fun-falls-victim-to-x-account-hack-fake-pump-token-circulates Pump.fun Falls Victim to X Account Hack—Fake “PUMP” Token Circulates - BitDegree] (Accessed Apr 28, 2025)</ref>

<ref name="cryptobriefing-19417">[https://cryptobriefing.com/account-hacked-fake-token-pump-fun/ Pump.fun's X account hacked to promote fake governance token $PUMP - CryptoBriefing] (Accessed Apr 28, 2025)</ref>

<ref name="zachxbttelegram-19418">[https://t.me/investigations/223 ZachXBT Investigation On Telegram] (Accessed Apr 28, 2025)</ref>

<ref name="solscan-19419">[https://solscan.io/account/42TEV7iqRVUNP11fk2Huczq6BX8C79EnPaF8veHmMi7T?page=59#defiactivities https://solscan.io/account/42TEV7iqRVUNP11fk2Huczq6BX8C79EnPaF8veHmMi7T?page=59#defiactivities] (Accessed Apr 28, 2025)</ref>

<ref name="qubitxbttwitter-19420">[https://twitter.com/qubitxbt/status/1894796853016928492 @qubitxbt Twitter] (Accessed Apr 28, 2025)</ref>

<ref name="0xdeepztwitter-19421">[https://twitter.com/0xDeepz/status/1894817651685228888 @0xDeepz Twitter] (Accessed Apr 28, 2025)</ref>

<ref name="memeseusmaximustweet-19422">[https://twitter.com/MemeseusMaximus/status/1894771751495643471 MemeseusMaximus - "@pumpdotfun account compromised, the token is fake." - Twitter/X] (Accessed Apr 28, 2025)</ref>

<ref name="memestreetbetstwitter-19423">[https://twitter.com/_memestreetbets/status/1894822918707933266 @_memestreetbets Twitter] (Accessed Apr 28, 2025)</ref>

<ref name="directorvibestwitter-19424">[https://twitter.com/DirectorVibes/status/1894773073204961316 @DirectorVibes Twitter] (Accessed Apr 28, 2025)</ref>

<ref name="yutibottwitter-19425">[https://twitter.com/YutiBot/status/1894770883169780160 @YutiBot Twitter] (Accessed Apr 28, 2025)</ref>

<ref name="stat1xxtwitter-19426">[https://twitter.com/stat1x_x/status/1894807531253342572 @stat1x_x Twitter] (Accessed Apr 28, 2025)</ref>

<ref name="eldaronetwitter-19427">[https://twitter.com/Eldarone_/status/1894772989733810238 @Eldarone_ Twitter] (Accessed Apr 28, 2025)</ref>

<ref name="degenrorytwitter-19428">[https://twitter.com/degenrory/status/1894863383079407726 @degenrory Twitter] (Accessed Apr 28, 2025)</ref>

<ref name="lanacoinaitwitter-19429">[https://twitter.com/LanaCoin_Ai/status/1894844702563979596 @LanaCoin_Ai Twitter] (Accessed Apr 28, 2025)</ref>

<ref name="kingjameslostwitter-19430">[https://twitter.com/KingJamesLOS/status/1894773111016325508 @KingJamesLOS Twitter] (Accessed Apr 28, 2025)</ref>

<ref name="chaingptaitwitter-19431">[https://twitter.com/ChainGPTAI/status/1895056607035183327 @ChainGPTAI Twitter] (Accessed Apr 28, 2025)</ref>

<ref name="pinkprintersoltwitter-19432">[https://twitter.com/pinkprintersol/status/1894786301875958150 @pinkprintersol Twitter] (Accessed Apr 28, 2025)</ref>

<ref name="1moreeetwitter-19433">[https://twitter.com/1Moree_e/status/1894802523774751197 @1Moree_e Twitter] (Accessed Apr 28, 2025)</ref>

<ref name="iamzebulltwitter-19434">[https://twitter.com/IAmZeBull/status/1894773168398823774 @IAmZeBull Twitter] (Accessed Apr 28, 2025)</ref>

<ref name="0xadvocatustwitter-19435">[https://twitter.com/0xAdvocatus/status/1894772235451109591 @0xAdvocatus Twitter] (Accessed Apr 28, 2025)</ref>

<ref name="cyphrgmtwitter-19436">[https://twitter.com/CyphrGM/status/1894771507798180183 @CyphrGM Twitter] (Accessed Apr 28, 2025)</ref>

<ref name="ivolxbttwitter-19437">[https://twitter.com/ivolxbt/status/1894771074346221723 @ivolxbt Twitter] (Accessed Apr 28, 2025)</ref>

<ref name="lanacoinaitwitter-19438">[https://twitter.com/LanaCoin_Ai/status/1894831809839669570 @LanaCoin_Ai Twitter] (Accessed Apr 28, 2025)</ref>

<ref name="madmixnumtwitter-19439">[https://twitter.com/madmixnum/status/1894880871481839838 @madmixnum Twitter] (Accessed Apr 28, 2025)</ref></references>

Pump.Fun $PUMP Token From Twitter/X Account Breach - Revision history