ChainBleedv0.1 · open intel
← back to feed·SOLSOCIAL-ENGINEERING2026-05-11 · 29d ago
Incident · COMMUNITY-ALERT

Roaring Kitty X Account → $RKC memecoin pump-dump

X account takeover → coordinated memecoin pump-and-dump on Pump.fun
Estimated loss
$2.86M
VERDICT —OUT OF SCOPE
Out of scope for contract review. The root cause is account-takeover and influencer-signal abuse, not a smart-contract bug. Bytecode review of the Pump.fun token program would show standard memecoin issuance — nothing structurally wrong. The defensive surface for this class lives in account-security hardening (2FA, hardware keys, X account verification) and platform-side detection of coordinated pump signals — categories that audit firms do not own.
▰ METHOD
X account takeover → coordinated memecoin pump-and-dump on Pump.fun
SOCIAL-ENGINEERING
Root cause

Keith Gill's (Roaring Kitty) verified X account was hijacked on 2026-05-11. The attacker posted the contract address of a freshly launched Solana memecoin '$RKC' (Red Kitten Crew) on Pump.fun, accompanied by themed imagery. The signal pumped market cap to ~$11-12M within minutes; the developer/attacker dumped from 10 pre-positioned wallets (~39.52% of supply acquired for ~$1,950) and exited for >$611K personal profit. Over 80 follower wallets bought into the pump and were left holding a collapsing token (90%+ crash within an hour after the X posts were deleted). Aggregate community loss: ~$2.86M. This is NOT a contract bug — it is a textbook social-engineering / account-takeover attack monetized via a freshly-deployed but otherwise-routine SPL token on Pump.fun. The Solana program (Pump.fun's token contract) operated exactly as designed; the loss happened because an account with credibility was hijacked and used to signal-pump.

Forensic narrative

Method: X account takeover → coordinated memecoin pump-and-dump on Pump.fun. Root cause: Keith Gill's (Roaring Kitty) verified X account was hijacked on 2026-05-11. The attacker posted the contract address of a freshly launched Solana memecoin '$RKC' (Red Kitten Crew) on Pump.fun, accompanied by themed imagery. The signal pumped market cap to ~$11-12M within minutes; the developer/attacker dumped from 10 pre-positioned wallets (~39.52% of supply acquired for ~$1,950) and exited for >$611K personal profit. Over 80 follower wallets bought into the pump and were left holding a collapsing token (90%+ crash within an hour after the X posts were deleted). Aggregate community loss: ~$2.86M. This is NOT a contract bug — it is a textbook social-engineering / account-takeover attack monetized via a freshly-deployed but otherwise-routine SPL token on Pump.fun. The Solana program (Pump.fun's token contract) operated exactly as designed; the loss happened because an account with credibility was hijacked and used to signal-pump. Narrative: On 2026-05-11, Keith Gill's verified X account (Roaring Kitty) was hijacked. The attacker posted the contract address of $RKC, a fresh Pump.fun memecoin on Solana, briefly pumping it to $11-12M market cap. Developer wallets dumped 39.52% of supply (acquired for ~$1.9K) for >$611K profit. 80+ wallets that bought into the pump lost an aggregate ~$2.86M when the token crashed 90%+ within the hour. Posts were deleted; account control was eventually recovered. Notes: Not a contract exploit. Account-hijack + signal-pump pattern. Affected ~80 follower wallets, aggregate ~$2.86M loss. Attacker pre-positioned 10 wallets with 39.52% of supply; exited for $611K+ profit.

Primary source
https://x.com/RoaringKitty
Sourced from
community-alert
Technical record
chain
solana
protocol
Roaring Kitty X Account → $RKC memecoin pump-dump
bug_class
social-engineering
date_occurred
2026-05-11
loss_usd
$2,860,000
source_id
ca:roaring-kitty-x-rkc-2026-05-11
Related — same bug class· social-engineering
2026-04-01
2mo ago
SOL
Drift Protocol
DPRK-linked Privileged-Access Drain
social-engineering
$286.00M
OUT OF SCOPE
2026-02-23
3mo ago
WLFI
Social Engineering
social-engineering
OUT OF SCOPE
2025-09-01
9mo ago
BSC
OlaXBT
Multisig wallet Social Engineering Exploit
social-engineering
$2.00M
OUT OF SCOPE
2025-07-24
10mo ago
MULTI
WOO X
Social Engineering
social-engineering
$14.00M
OUT OF SCOPE
2025-04-27
1y ago
QuantMaster
Insider Manipulation
social-engineering
$100.0K
OUT OF SCOPE
2025-04-11
1y ago
ETH
Jake Gallen
Social Engineering
social-engineering
$100.0K
OUT OF SCOPE
ChainBleed — live web3 threat intelligence