Bonk.fun has alerted its users about unauthorized access to their domain following a cyber-attack that aimed to steal funds through a fraudulent prompting mechanism.

The platform, which operates within the Solana ecosystem, warned users not to engage with the site while they worked to rectify the situation. A post on their X account stated, “A malicious actor has compromised the BONKfun domain; do not interact with the website until we secure everything.”

A person known as Tom, who is affiliated with Bonk.fun, detailed that hackers exploited the compromised account to disseminate misleading messages intended to coerce users into approving harmful transactions.

Bonk.fun domain hijacked. Source: Tom

In a subsequent communication, Tom noted that the attack specifically affected users who had interacted with the fake terms-of-service alert displayed during the incident. Those who had previously connected their wallets to Bonk.fun were unharmed, as were traders managing Bonk-associated tokens via separate platforms.

Related: Trust Wallet adds real-time scam address checks for crypto users

User Reports of Financial Loss

Some users expressed concerns over financial losses after the incident, with one reporting a loss of approximately 50 Solana (SOL), and another indicating they lost around 10 SOL. Additional users reported varying amounts of other losses.

Tom assured users that the situation was swiftly addressed and that the losses reported were limited thus far. “We understand a lot of people are scared, and rightfully so, but we’re doing everything we can to resolve the issue,” he affirmed.

Cointelegraph attempted to reach Tom for further comments but had not received a response by the time of publication.