Keith Gill's (Roaring Kitty) verified X account was hijacked on 2026-05-11. The attacker posted the contract address of a freshly launched Solana memecoin '$RKC' (Red Kitten Crew) on Pump.fun, accompanied by themed imagery. The signal pumped market cap to ~$11-12M within minutes; the developer/attacker dumped from 10 pre-positioned wallets (~39.52% of supply acquired for ~$1,950) and exited for >$611K personal profit. Over 80 follower wallets bought into the pump and were left holding a collapsing token (90%+ crash within an hour after the X posts were deleted). Aggregate community loss: ~$2.86M. This is NOT a contract bug — it is a textbook social-engineering / account-takeover attack monetized via a freshly-deployed but otherwise-routine SPL token on Pump.fun. The Solana program (Pump.fun's token contract) operated exactly as designed; the loss happened because an account with credibility was hijacked and used to signal-pump.
Method: X account takeover → coordinated memecoin pump-and-dump on Pump.fun. Root cause: Keith Gill's (Roaring Kitty) verified X account was hijacked on 2026-05-11. The attacker posted the contract address of a freshly launched Solana memecoin '$RKC' (Red Kitten Crew) on Pump.fun, accompanied by themed imagery. The signal pumped market cap to ~$11-12M within minutes; the developer/attacker dumped from 10 pre-positioned wallets (~39.52% of supply acquired for ~$1,950) and exited for >$611K personal profit. Over 80 follower wallets bought into the pump and were left holding a collapsing token (90%+ crash within an hour after the X posts were deleted). Aggregate community loss: ~$2.86M. This is NOT a contract bug — it is a textbook social-engineering / account-takeover attack monetized via a freshly-deployed but otherwise-routine SPL token on Pump.fun. The Solana program (Pump.fun's token contract) operated exactly as designed; the loss happened because an account with credibility was hijacked and used to signal-pump. Narrative: On 2026-05-11, Keith Gill's verified X account (Roaring Kitty) was hijacked. The attacker posted the contract address of $RKC, a fresh Pump.fun memecoin on Solana, briefly pumping it to $11-12M market cap. Developer wallets dumped 39.52% of supply (acquired for ~$1.9K) for >$611K profit. 80+ wallets that bought into the pump lost an aggregate ~$2.86M when the token crashed 90%+ within the hour. Posts were deleted; account control was eventually recovered. Notes: Not a contract exploit. Account-hijack + signal-pump pattern. Affected ~80 follower wallets, aggregate ~$2.86M loss. Attacker pre-positioned 10 wallets with 39.52% of supply; exited for $611K+ profit.
- chain
- solana
- protocol
- Roaring Kitty X Account → $RKC memecoin pump-dump
- bug_class
- social-engineering
- date_occurred
- 2026-05-11
- loss_usd
- $2,860,000
- source_id
- ca:roaring-kitty-x-rkc-2026-05-11