Pump.Science Wallet Private Key Leak Leads to Fraudulent Tokens

Security Breach at Pump.Science: Private Key Leak Sparks Token Fraud

Pump.Science, a decentralized science (DeSci) launch platform operating on the Solana blockchain, has confirmed a major security breach involving the private key of one of its wallets. The breach, which exposed the wallet T5j2UBTvLYPCwDP5MVkSALN7fwuLFDL9jUXJNjjb8sc, has resulted in the creation and circulation of fraudulent tokens, raising serious concerns about platform security and market integrity.

Another cooking airdrop at Swallow Bitget 👇

https://share.bwb.site/inviteLink?code=SUbZW2&shareLang=id&teamCode=&source=copy

Private Key Leak Traced to GitHub Oversight

The platform revealed that the private key in question had been inadvertently included in its GitHub repository, a critical oversight that left it vulnerable to exploitation. While the wallet was originally used to issue legitimate tokens, including Urolithin A (URO) and Rifampicin (RIF), an attacker seized the opportunity to create unauthorized tokens.

One such fraudulent token, a counterfeit version of Urolithin B (URO), was issued on November 25 and was initially mistaken for an official release. The counterfeit token caused market chaos, with its value soaring to $10 million within minutes of being added to a liquidity pool before collapsing to just $100,000.

Market Impact and Community Confusion

The fraudulent token issuance has sown confusion and mistrust within the Pump.Science community. Many users, initially deceived into believing the counterfeit tokens were legitimate, suffered financial losses. The breach has also significantly impacted the market performance of the platform’s genuine tokens.

Urolithin A (URO), one of Pump.Science's primary tokens, experienced a sharp decline, dropping 25.48% in value within a single day. It is now trading at $0.03044, with a market capitalization of $30.43 million and a 24-hour trading volume of $12.66 million. Similarly, Rifampicin (RIF) saw its value decrease by 24.81% to $0.07041, with a market cap of $70.38 million and a daily trading volume of $97.57 million.

Pump.Science issued an urgent warning to its users:
"None of these tokens were launched by our team. These tokens are fraudulent."

The team has advised the community to avoid interacting with any tokens associated with the compromised wallet or its linked pump.fun profile.

Security Lessons for Blockchain Platforms

The incident highlights the vulnerabilities faced by blockchain platforms, particularly those operating in innovative yet rapidly evolving fields like decentralized science. Pump.Science admitted that the compromised wallet was initially intended for testing purposes, but the inclusion of its private key in the GitHub repository led to the breach.

The platform’s reliance on the wallet for issuing legitimate tokens like Urolithin A (URO) and Rifampicin (RIF) further exacerbated the problem, as the fraudulent tokens appeared legitimate to unsuspecting users.

Security experts have underscored the need for stricter protocols, particularly in safeguarding sensitive credentials like private keys. "This is a stark reminder of the importance of adhering to rigorous security standards, especially for blockchain-based platforms handling high-value assets," said a cybersecurity analyst familiar with the case.

Investigations and Path Forward

Pump.Science has confirmed it is actively investigating the breach and is working to strengthen its security measures to prevent similar incidents in the future. The platform has also urged its community to exercise heightened caution and verify the authenticity of tokens before engaging in any transactions.

This breach has cast a shadow over the burgeoning DeSci ecosystem, emphasizing the need for robust security and transparency as the sector continues to grow. For Pump.Science, regaining user trust will be critical to its recovery and ongoing development.

As the investigation unfolds, the incident serves as a cautionary tale for other blockchain projects about the catastrophic consequences of overlooked security practices.

Source: CoinCodeX

Those who haven't mined Pi Coin, download it now

https://minepi.com/H002xli

Invite Code: H002xli  

HokaNews Launches New Telegram Channel for Latest Airdrops

HokaNews has officially launched its new Telegram channel, HokaNews Airdrop, designed to provide the latest updates on airdrops and collaborative earning opportunities. The channel aims to keep the community informed and engaged without charging any fees.

It is important to note that HokaNews does not solicit payments for airdrop information or access. The only official channel for HokaNews is named HokaNews Airdrop, accessible via the following link: https://t.me/hokanewsAirdrop. Any claims of payment requests from individuals purporting to represent HokaNews are fraudulent.

Want to talk to our team, log in from here 👇

https://t.me/hokanewsAirdropChat

Join us on HokaNews Airdrop to stay updated with the latest airdrop news and participate in opportunities at no cost.

 

Writer @Ellena

Ellena is an experienced crypto writer who loves to explore the intersection of blockchain technology and financial markets. She regularly provides insights into the latest trends and innovations in the digital currency space.

 

 Check out other news and articles on Google News

Disclaimer:

The articles published on hokaNews are intended to provide up-to-date information on various topics, including cryptocurrency and technology news. The content on our site is not intended as an invitation to buy, sell, or invest in any assets. We encourage readers to conduct their own research and evaluation before making any investment or financial decisions.

hokaNews is not responsible for any losses or damages that may arise from the use of information provided on this site. Investment decisions should be based on thorough research and advice from qualified financial advisors. Information on HokaNews may change without notice, and we do not guarantee the accuracy or completeness of the content published.