Attackers seized BONK.fun’s domain and a team account, inserting a fake terms prompt and wallet-draining code. The prompt triggered browser phishing warnings and emptied wallets of users who signed, further undermining the Solana meme-coin launchpad’s already weak market position.