Pump.fun Hack: X Account Promotes Fake $PUMP Token

Key Takeaways
- It’s been reported that Pump.fun’s X account was hacked, with attackers promoting a fake governance token called ‘$PUMP.’
- The crypto community quickly spotted the scam for what it was.
Heads up, crypto folks! Pump.fun’s official X (formerly Twitter) account experienced a security breach today. It seems hackers got in and used the platform to try and pump up a fraudulent governance token called “$PUMP.”
Earlier today, in a pinned tweet on the compromised account, the hackers boldly claimed “$PUMP” was the “OFFICIAL pump.fun GOVERNANCE token.” They even threw in a promise of rewards for “OG DEGENS” along with a contract address.
But here’s where the crypto community’s vigilance shines – sharp-eyed members quickly recognized the announcement as a scam. The fake token tweet and that dodgy contract address? They were taken down from the platform pretty quickly.
Pump.fun has officially acknowledged the security incident and is urging everyone to ignore the fraudulent token announcement. They’re also advising users to steer clear of interacting with that suspicious contract address while they work on regaining control of their X account and investigate what happened.
@pumpdotfun account has just been compromised. Please don’t interact
— alon (@a1lon9) February 26, 2025
Adding another interesting layer, blockchain investigator ZachXBT has dug into on-chain data and suggests a possible connection between this Pump.fun X account hack and previous security issues with Jupiter DAO and DogWifCoin’s accounts.
“Interestingly, it looks like these attacks might not be the fault of the Pump Fun or Jupiter DAO teams themselves. My hunch is that a threat actor is cleverly using social engineering on X employees, maybe with fake documents or emails, or perhaps they’re exploiting some kind of panel vulnerability,” ZachXBT explained.