pump.fun X account hack

pump.fun X account hack

Image: official logo
date	February 26, 2025
platform	X (Twitter)
victim	pump.fun official account
fake token peak	about $5 million market cap
linked incidents	Jupiter DAO, DogWifCoin, Nasdaq account hacks

The February 26, 2025 compromise of pump.fun's official X account, used to shill a fake PUMP governance token that hit a $5 million market cap before collapsing, part of a string of connected crypto account takeovers.

The pump.fun X account hack was the February 26, 2025 takeover of the official X account of pump.fun, the dominant meme coin launchpad on Solana. The attacker used the account to promote a fraudulent "PUMP" token presented as the platform's official governance token, which briefly reached a market cap of about $5 million before collapsing. The incident became one of the most discussed security failures of the early 2025 trench era, both for its scale and for its irony: the fake token it advertised anticipated the real PUMP token pump.fun would sell five months later.

The hack

On the morning of February 26, 2025, posts appeared from pump.fun's account announcing a governance token that would supposedly reward the platform's "OG Degens," alongside a Solana contract address. Despite immediate warnings from analysts that the token's supply was concentrated in a small cluster of wallets, buyers piled in and the fake PUMP briefly reached roughly $5 million in market value before crashing. The hijacked account also promoted at least two other tokens, named "HACKED" and "hackeddotfun," in an apparent taunt. The pump.fun website itself was not compromised and user funds on the platform were unaffected. Cofounder alon and the team warned users from backup channels not to interact with the posts, and the platform did not immediately regain control of the account.

A connected campaign

Onchain investigator ZachXBT said the pump.fun hack was directly connected onchain to earlier takeovers of the Jupiter DAO account, hacked earlier that February to promote a fake meme coin, and the DogWifCoin account, compromised in November 2024. The same season produced a wave of similar incidents across crypto twitter, including the January 22, 2025 hack of Nasdaq's X account, where a fake meme coin reached an $80 million market cap, and a February 12 compromise of World Liberty Financial cofounder Zach Witkoff's account pushing a Barron Trump themed token. Coverage framed the wave as an industrialized scam economy that had grown around launchpads: hijack a trusted account, launch a token in minutes, and dump on the followers.

Aftermath

The episode reinforced a standing rule in the trenches that no contract address posted by an official account can be trusted at face value, and it fed the running joke, revived after the PUMP token ICO, that pump.fun's hacker simply front ran the business plan. Social account security remained a weak point for the company: in April 2026 pump.fun's Instagram account was also hacked, though the platform said no user assets were affected.

References

• The Block, Pump.fun's X account hacked to promote fraudulent tokens: https://www.theblock.co/post/343515/pump-funs-x-account-hacked-to-promote-fraudulent-tokens
• CoinMarketCap Academy, Pump.fun's X account hacked to promote fake PUMP token, triggering $5 million market cap surge: https://coinmarketcap.com/academy/article/pumpfuns-x-account-hacked-to-promote-fake-pump-token-triggering-dollar5-million-market-cap-surge
• Yahoo Finance, Pump.fun's X account hacked to promote fake PUMP token: https://www.yahoo.com/news/markets/crypto/articles/pump-funs-x-account-hacked-082404532.html
• Bitdefender Hot for Security, Pump.fun X account hacked to promote fake PUMP token scam: https://www.bitdefender.com/en-us/blog/hotforsecurity/pump-fun-x-account-hacked-to-promote-fake-pump-token-cryptocurrency-scam
• The Crypto Times, Pump.fun Instagram account hacked, platforms remain safe: https://www.cryptotimes.io/2026/04/19/pump-fun-instagram-account-hacked-platforms-remain-safe/