What Happened to BONK.fun: The Story and an Update Following Its Return

Last week was critical for the Solana ecosystem and memecoins, especially due to what happened with BONK.fun. This launchpad was offline for just over a week and has recently returned (with many new features, by the way).

In this article, I will explain what happened to Bonk, why it was inactive for a period, and what it has done to restore the memecoin war.

What happened to BONK.fun: hijacked and drainer

On March 11th, an incident was reported directly affecting the Bonk website. This was not a smart contract failure, but a domain hijacking that was executed using social engineering techniques against their domain service provider.

This allowed a malicious actor to take control of the site and display prompts designed to trick some users into agreeing to harmful interactions (a typical drainer pattern, but executed from the frontend).

To better understand this, let’s briefly review the timeline of these types of attacks and how they affect users:

1. The Bonk frontend was replaced due to control by a malicious actor.
2. Users thought they were on the official website and connected their wallets to do whatever they wanted.
3. They signed a fake contract, which triggered the drainer.
4. The funds from the wallets were transferred to other accounts, which were set up to cover their tracks.

Upon detecting this anomaly, the team behind Bonk decided to temporarily suspend the domains while the issue was being resolved. Consequently, the Launchpad remained inaccessible for just over a week.

How did the recovery go, and what did the team say?

In a subsequent update, BONK.fun explained that the domain was ultimately transferred to an external registrar following the attack on the provider, and that internal systems, code repositories, and team accounts were not compromised.

Regarding the impact, several publications reporting on the statement mention estimated losses of around $30,000 and a 110% refund plan for affected users (yes, they were compensated with an additional 10% for the issue). Additionally, it was noted that control of the main domain had been regained.

It was also clarified that users who had previously connected their wallet were not necessarily exposed, and those interacting with Bonk-related tokens from external terminals were also reported as being out of risk in that context.

Bonk has been operational since March 20th, so you can now visit the Launchpad and seamlessly utilize all its features.

Updates on Bonk.fun

The interesting part is that, after stabilizing its operations, BONK.fun announced a new feature aimed at aligning incentives with Balanced Mode. The announcement details a two-pronged mechanism:

• For traders: 0.75% of the post-bonding volume is automatically allocated to liquidity pools, with the aim of creating deeper liquidity pools (estimated at ~4x) and improving the token longevity.
• For deployers/creators: 0.25% of the bonding curve’s volume is allocated to a reward pool and, every 24 hours, distributed among those who successfully created bonds during that period.

When it comes to successfully earning bonds, it’s simply a matter of staking the Bonk token or surpassing the bonding curve.

This change is relevant because it addresses two typical frictions of launchpads: insufficient liquidity post-graduation and zero continuity for creators once the token starts trading in the market. While not guaranteeing results, it is a design adjustment aimed at ensuring the token has better market conditions (LP depth) and that the creator has an operational incentive tied to real executions (bonds).

If your objective is to integrate into the Bonk.fun ecosystem, I recommend consulting this guide on how to create a memecoin on Bonk.

Transforming a memecoin into a successful bond

Now more than ever, surpassing the bonding curve on Bonk is crucial. The reward pool is distributed equally among all creators who achieve this within a 24-hour period.

These funds are perfect for financing growth campaigns and increasing your reach. It sounds easy, but the reality is that creating successful memecoins is complicated. Less than 3% of memecoins manage to pass the bonding phase.

That's why I recommend checking out our guide on how to use BONK volume bot . It's a tool that lets you rank among the most traded tokens and appear at the top of the homepage.

More exposure = Reaching potential investors

What can you do to reduce the risks posed by hijacked sites?

Front-end spoofing through domain configurations is a problem that can affect anyone. It's not about compromising protocols or smart contracts, but rather replacing access to a platform for a limited time.

To help prevent future cases, here are some tips:

• Make use of bookmarks and always avoid links sent via DM.
• Before signing any interaction with ecosystem platforms, ignore any unusual prompts to sign transactions, such as “sign to continue” or “sign to accept terms and conditions.”
• If you notice unusual changes on the platform, such as buttons out of place or different text fonts, this could be a sign that the page has been hijacked.
• Stay vigilant on official social media channels. Bonk issued a report upon detecting the issue and mitigating its impact.

FAQ

I have been closely following all developments regarding Bonk from the onset of the incident through its subsequent recovery. Therefore, I have compiled the most frequently asked questions and will answer them below.

What happened to BONK?

On March 11, a domain hijacking incident via social engineering was reported against a provider, which allowed the injection of a malicious interface exhibiting wallet drainer behavior. The platform is currently operational.

Were BONK's smart contracts hacked?

Official communications emphasize that it was not an on-chain protocol failure, but rather a domain/frontend incident. It was also stated that internal systems and repositories remained unaffected.

What did BONK.fun do after restoring the site?

Users affected by this vulnerability were reimbursed at 110% (an estimated 30,000 USD was siphoned off). An alternative domain was enabled, and it was explained that those who used methods other than Bonk are not at risk.

What is balanced mode, and what does it change?

A mechanism that directs 0.75% of the post-bonding volume to LP pools to enhance liquidity and 0.25% of the bonding curve to a pool that is distributed every 24 hours among creators with successful bonds.

Conclusion

What happened to BONK.fun served as a reminder that, in Web3, security doesn't solely reside within the smart contract: the domain and frontend can often become the most vulnerable points. The recovery process involved public communication, a compensation plan, and ensuring continuity via an alternative domain. Furthermore, the 'post-incident' phase introduced a significant innovation: Balanced Mode, designed to reinforce liquidity and align incentives between traders and creators.