BONK.fun Recovers Domain After Hack; Team to Compensate Users 110%

The decentralized platform BONK.fun has officially resumed operations following a security breach that occurred on March 11, 2026. The incident, which involved the illegal hijacking of the platform's primary domain, resulted in approximately $80,000 in user losses. In a move to restore community trust, the project team has committed to a 110% compensation plan for all verified victims, covering both the lost capital and potential opportunity costs incurred during the downtime.

Social Engineering Attack Targets Domain Provider

According to the official post-mortem report, the breach was not the result of a vulnerability within the Solana blockchain or the platform's smart contracts. Instead, attackers executed a social engineering attack directed at the project's third-party domain name service (DNS) provider. This allowed the malicious actors to gain unauthorized control over the domain and redirect users to fraudulent interfaces designed to drain wallets.

• The DNS provider has formally acknowledged responsibility for the security lapse.
• Internal systems, including code repositories and developer accounts, remained secure throughout the event.
• The team successfully recovered control of the main domain after coordinating with cybersecurity experts and the service provider.

Compensation Strategy and Future Security

To mitigate the impact on the ecosystem, the BONK.fun team has outlined a specific reimbursement protocol. Beyond simply returning the stolen assets, the 110% payout is intended to acknowledge the volatility and lost trading windows inherent in the meme coin sector. Social engineering remains one of the most prevalent threats in the Web3 space, often bypassing even the most robust on-chain security measures by targeting human and administrative entry points.

The security incident resulted in a total user loss of approximately $80,000. We will compensate affected users by 110% of the loss amount to cover their opportunity costs.

The restoration of the BONK.fun domain marks the conclusion of the recovery phase. Moving forward, the project intends to implement enhanced security protocols for its web infrastructure to prevent similar DNS-related disruptions. Users are advised to remain vigilant and ensure they are interacting with the verified URL when connecting their digital wallets to any decentralized application.