Pond.fun, a meme coin launchpad that operates on the Linea platform, experienced a significant security breach from an insider.

On March 5, 2025 the memecoin platform shared a post on X stating that the platform had been hacked with evidence on-chain and off-chain pointing to a  one of the software engineers on Pond.fun's team.

The memecoin launchpad, operating on the Linea platform, had been programmed to launch on March 5. But it seems that the launch has hit a rather nasty setback.

The platform was the subject of a significant security breach, with evidence on-chain and off-chain seemingly pointing to one of the software engineers on Pond.fun’s team being the perpetrator.

The platform’s lead software engineer, who is known as Genesis, took the advantage of internal access to steal 64.8 Ethereum (ETH) from the project’s liquidity pools. These stolen assets were subsequently funneled through Railgun, a privacy protocol designed to obscure blockchain transactions.

In response to the breach, Pond.fun has alerted its user base, advising them against any interaction with the platform’s main website and associated sites like efrogs and croak. However, they’ve also assured users that their Discord and Telegram channels are still secure. The platform has also provided a comprehensive list of mainnet addresses implicated in the unauthorized transactions

To further help reduce the impact and recover the stolen funds, Pond.fun has also made use of the expertise of other blockchain analytics firms Chainalysis and Elliptic. These blockchain firms specialize in tracing illicit cryptocurrency movements and play a crucial role in preventing bad actors from laundering assets through privacy protocols like Railgun.

It is also important to note that many centralized exchanges and legitimate off-ramps require users to furnish Proof of Innocence (POI) when transacting through such privacy tools. By collaborating with Chainalysis and Elliptic, Pond.fun aims to ensure that the hackers cannot produce the necessary POI, which would then stop them from any attempts to liquidate the stolen ETH via other channels.

In light of these events, platforms operating in the decentralized finance (DeFi) space are also urged to implement high level security protocols. Regular audits, multi-signature authorization processes, and continuous monitoring can serve as deterrents against potential internal malfeasance.