Pump.fun Restores X Account After Unexpected Breach

The team confirmed in a February 27 post on X, "We've regained access to this account. Based on current information, the extent of the compromise was limited to this X account".

The breach was first noticed at approximately 15:20 PM UTC. No unauthorized changes were detected in the account’s email, password, delegation settings, or two-factor authentication.

Did you know?

Want to get smarter & wealthier with crypto?

Subscribe - We publish new crypto explainer videos every week!

What are dApps in Crypto? (Explained with Animations)

SUBSCRIBE

ON YOUTUBE

At the time of the breach, the account had no connected phone numbers or third-party app integrations and was already using a physical security key and Google Authenticator for additional security layers.

The team also confirmed that only one person had control of the X account when the breach occurred, and they had not engaged with any suspicious content that could have triggered an attack.

Blockchain investigator ZackXBT suggested that the issue did not stem from security flaws within Pump.fun or Jupiter but might have been carried out through social engineering tactics aimed at employees of X.

Pump.fun continues its investigation and will share any updates if new information surfaces. The team also thanked ZackXBT and X’s support staff for their quick response in assisting with the recovery.

On February 5, hackers took over the X accounts of former Malaysian Prime Minister and Jupiter, a Solana-based decentralized exchange aggregator. What was the purpose of these attacks? Read the full story.