BONK.fun has officially resumed operations after the domain hijacking incident that occurred last week. The team confirmed the cause was due to a vulnerability at a third-party provider, resulting in user losses of approximately $30,000.
In a statement on March 20, the project explained that the attack originated from social engineering exploiting the domain service provider, leading to the domain being illegally transferred to an external registrar. The provider later acknowledged responsibility for the incident.
Notably, BONK.fun emphasized that there was no intrusion into the internal system, source code, or team accounts. The incident was classified as an external infrastructure breach, not a protocol-level fault.
Control of the website allowed attackers to deploy phishing interfaces, tricking users into signing malicious transactions. Previously, reports indicated tactics involving fake terms of service agreements, granting unauthorized access to wallets.
Initially, the blockchain analysis platform Bubblemaps estimated damages at around $23,000. However, BONK.fun later adjusted this figure to $30,000 after a full review.
To mitigate the impact, the team committed to reimbursing 110% of the loss value to affected users, including both direct damages and opportunity costs.
According to BONK.fun, the unauthorized domain transfer significantly disrupted the response process, as domain control was temporarily out of the project’s reach.
The domain was restored on March 18, and all functions—including wallet integration—were back online from March 19. Wallet providers like Phantom, MetaMask, and Solflare played key roles in detecting and alerting about the domain compromise.
Although the platform is operational again, the team notes that some antivirus software continues to flag the main domain. During this period, users experiencing access issues are advised to use an alternative domain with similar functionality.
Market reaction to the incident has been relatively muted, with BONK’s price remaining on a downward trend.
Source: TradingView As of writing, the token is trading around $0.0000059, indicating a prolonged weakening since the peaks set in early March. The current price movement reflects cautious investor sentiment, as recovery momentum remains unclear despite the platform being back online.