Pump.fun Falls Victim to X Account Hack—Fake “PUMP” Token Circulates

Blockchain investigator ZachXBT alerted users about the compromised account, advising them not to engage with any posts or links shared by the hackers.

One message from ZachXBT's Telegram group reads, "PumpDotFun X/Twitter account is currently compromised. Do not click engage with posts or click links".

Did you know?

Want to get smarter & wealthier with crypto?

Subscribe - We publish new crypto explainer videos every week!

Hot VS Cold Wallet: Which One Do YOU Need? (Animated)

SUBSCRIBE

ON YOUTUBE

According to ZachXBT, this attack is connected to previous security breaches, including the February 2025 hack of the Jupiter DAO X account and the November 2024 compromise of DogWifCoin’s X account. They emphasized that the affected teams were not responsible for the security failures.

ZachXBT added, "I suspect a threat actor is social engineering employees at X with fraudulent documents / emails or a panel is being exploited".

During the hack, the attackers posted a message promoting the fake token:

Introducing PUMP. The official Pump.fun governance token, where democracy has never been this degen. We will also be rewarding our OG degens. Stay tuned for more details.

The Pump.fun team confirmed the breach and stated they are working to recover the account. They urged users to remain cautious and avoid engaging with any content from the compromised profile until access is restored.

Meanwhile, Infini, a stablecoin payment platform, recently lost $50 million in a security breach on February 24. How did the hacker pull it off? Read the full story.