Jarett Dunn
![]() | |
| handle | @STACCoverflow |
|---|---|
| role | former pump.fun developer |
| known for | the May 2024 pump.fun insider exploit, six year UK prison sentence |
Jarett Dunn is the Canadian developer who drained about $2 million from pump.fun in May 2024 while employed there, and was sentenced in December 2025 to six years in a UK prison.
Jarett Dunn, known online as STACCoverflow, is a Canadian software developer who carried out the May 2024 insider attack on pump fun, covered in detail at pump fun insider exploit. His employer of record was Baton Corporation Ltd, pump.fun's UK parent company, where he had worked about six weeks as a senior developer before using his privileged access to drain 14,716 SOL, about 1.9 million dollars at the time, from the platform's bonding curve contracts, one of the strangest crimes of the meme coin era because he gave most of the money away and confessed in real time. Prosecutors later put pump.fun's potential consequential losses as high as 10 million pounds, about 12.8 million dollars.
The exploit
On May 16, 2024, Dunn used internal access and flash loans to divert SOL held by pump.fun's curves, then airdropped the proceeds to thousands of wallets rather than keeping the funds; contemporaneous reporting says his script distributed the stolen balances pseudo randomly to holders of Slerf, Stacc, Saga, and risklol tokens. He narrated the attack on X as it happened, posting from the STACCoverflow account: "Everybody be cool, this is a robbery... I'm about to change the course of history. [And] then rot in jail." He framed the event as an "$80 million" airdrop, the sum he initially believed he could take, and presented himself as a whistleblower exposing the platform's risks rather than a thief. Trading on pump.fun halted for several hours; the company said user funds would be restored and the platform resumed operations. The episode punctured the invulnerable image of the biggest launchpad in the trenches at the height of its early growth.
Legal saga
Dunn was arrested in London on May 17, 2024 at a hotel and charged with fraud by abuse of position and transfer of criminal property. He was deemed unfit for police interview and hospitalized for two weeks for mental health treatment; he had been off psychiatric medication for months before the attack, medical details aired in court. The court heard diagnoses of schizoaffective bipolar disorder, panic disorder, and ADHD, and a psychiatric evaluation found he was aware of his actions but questioned his full understanding of their illegality.
He pleaded guilty in London in August 2024, telling Decrypt he would "be fine" in prison, then attempted to withdraw the plea at sentencing two months later, a reversal that saw his lawyers quit the case and the proceedings drag on for a year. Released on bail with an ankle monitor, he breached his conditions in mid 2025 by relocating from London to Liverpool without authorization and tampering with the tag, and was jailed on remand. He pleaded guilty again in August 2025. At sentencing on December 18, 2025, a judge at Wood Green Crown Court sentenced him to two concurrent six year terms, dismissing his whistleblower framing as "post-arrest spin"; his credit included 308 days on an electronic tag, of which 154 counted toward the sentence, and about five months on remand. He was held at HMP Pentonville, and a request for deportation to Canada had not been granted at the time of sentencing coverage. No appeal, restitution, or confiscation order had been reported as of mid 2026.
Significance
Dunn remains a singular figure in trench lore: the insider who robbed the casino and threw the chips into the crowd. His case, alongside the platform's civil litigation, is routinely cited in debates about how much trust the meme coin economy quietly places in the small teams that run its infrastructure.
References
- Decrypt: https://decrypt.co/244308/pump-fun-attacker-pleads-guilty-london
- Decrypt: https://decrypt.co/288345/pump-fun-attacker-withdraw-guilty
- Decrypt: https://decrypt.co/352876/former-pump-fun-dev-sentenced-six-years-prison-2-million-solana-fraud
- Cryptonews: https://cryptonews.com/news/ex-pump-fun-dev-behind-2m-theft-jailed-in-london-for-bail-breach-faces-7-years-prison/
- Cryptopolitan: https://www.cryptopolitan.com/ex-pump-fun-dev-sentenced-to-6-years-for-2-million-solana-fraud/
- Bitcoinist: https://bitcoinist.com/pump-fun-ex%E2%80%91developer-2m-theft-jailed-bail-breach/
- CCN: https://www.ccn.com/news/crypto/pump-fun-exploiter-jarett-dunn-arrested-over-1-9-million-hack/
- ChainCatcher: https://www.chaincatcher.com/en/article/2124676
- Javier Milei Javier Milei is the president of Argentina whose February 2025 post promoting the LIBRA to
- Jeets Jeets is a pseudonymous memecoin poster on X as @ieatjeets whose name plays on trench slan
- Jidn Jidn is a Solana memecoin trader known for a brash meme heavy persona and participation in
- Jijo Jijo is a pseudonymous Solana memecoin trader and kolscan leaderboard regular who also ope
- Joji Joji is a memecoin trader and crypto influencer with a following in the hundreds of thousa
