Pump.fun, a Popular Solana-based Meme Coin Creation and Trading Platform, Had Its X Account Hacked

Pump.fun, a popular Solana-based platform for creating and trading meme coins, had its X account hacked on February 26, 2025. The hackers used the compromised account to promote a fraudulent “PUMP” token

Pump.fun, a well-known platform on Solana for creating and trading meme coins, fell victim to an X account hack on February 26.

The hackers used the compromised account to promote a fraudulent "PUMP" token, claiming it was the official governance token of the Pump.fun company platform. The fake post read, "Introducing $PUMP the OFFICIAL pump.fun GOVERNANCE token, where Democracy has never been this degen.

We will also be REWARDING our OG DEGENS."

The hackers, who identified themselves as "GPT-4.5," threatened to delete the Pump.fun X account if the token reaches a $100 million market cap.

Despite warnings that the token's supply was heavily concentrated among a small group of wallets, the PUMP token briefly reached a $5 million market cap before rapidly crashing.

The Pump.fun team acknowledged the breach and urged users to disregard any messages from the compromised account.

"Our X account has been hacked. Please do not interact with any messages from this account as they are fraudulent," the team said.

Alon Cohen, co-founder of Pump.fun, confirmed the breach and said all security protocols had been followed. Suggesting a possibility, Cohen said there might be an issue within X itself.

"It seems like there was a vulnerability on X which allowed an attacker to take over the account despite all security measures being in place. We are working closely with the X team to resolve this issue."

The hackers continued to use the compromised account to promote additional scam tokens, such as "hackeddotfun" and "HACKED.

Pump.fun has been one of the most active platforms for launching Solana-based meme coins, with over 8 million tokens deployed since its launch in January 2024. However, the platform has faced controversies, including the LIBRA token launch in Argentina that led to a $107 million rug pull.

On-chain investigator ZachXBT connected the Pump.fun hack to similar attacks on Jupiter DAO and DogWifCoin, speculating that social engineering tactics were likely used to compromise the X accounts.

He noted the commonalities in the hackers' messages, which included a playful tone, mentions of GPT-4.5 and a Bitcoin address for donations.

"I want to be clear: the teams at both Jupiter and Pump.fun are not at fault. These scams are being perpetrated by someone who is purposely trying to defraud people."