pump.fun: The contract has been upgraded, and the attacker can no longer steal more funds
ChainCatcher news, pump.fun posted on platform X that it has become aware of an attack on its contract and is investigating the matter. The contract has been upgraded, so the attacker can no longer steal any funds.
The total value locked (TVL) in the protocol is safe. Trading has been suspended, and it is currently not possible to buy or sell any tokens. Any tokens currently migrating to Raydium cannot be traded and will not be migrated for the foreseeable future. Tokens that have already been successfully transferred from pump.fun's contract and have locked liquidity on Raydium are safe. If users have ever connected their wallets to pump.fun, their wallets are safe. They are working with relevant parties, including law enforcement, to mitigate losses.
Previous news, the pump.fun attacker is suspected of conducting random airdrops of the stolen funds, with airdrop recipients including holders of slerf, saga, and others.