Pond.fun

Insider Manipulation

Estimated loss

$145.0K

VERDICT —OUT OF SCOPE

Root cause is social engineering — privileged personnel deceived into authorizing the drain. Contract behaved as written. Defense lives in process controls (multi-party approval, M-of-N signoff windows), not in smart-contract review.

▰ METHOD

SOCIAL ENGINEERING

SOCIAL-ENGINEERING

Root cause

Root-cause analysis not yet published. The incident description below contains all currently available signal — review the attack transaction directly for definitive forensics.

Forensic narrative

According to Pond.fun's official disclosure, the Linea-based meme coin launchpad Pond.fun was hacked this morning. Initial on-chain and off-chain evidence suggests that Pond.fun’s lead software engineer was behind the attack. The attacker drained liquidity from the Pond.fun smart contract and sold off the project tokens. Attack method (per SlowMist): Insider Manipulation. Reported loss: $ 145,000.

Primary source

https://www.panewslab.com/zh/sqarticledetails/wb4id59q.html ↗

Sourced from

slowmist

Technical record