Vulnerability

Pump.fun token-graduation vulnerability

vulnerability:pump_fun_token_graduation_vulnerability

A code weakness that allowed Pump.fun’s liquidity destination to be redirected when tokens graduated to Raydium.

Explore relationships

Mentioned in

Relationships

Direction Predicate Other entity Origin EP
outgoing AFFECTS Pump.fun Derived 152
outgoing DISCOVERED_BY Jarett Dunn Explicit 152
incoming EXPLOITS Flash-loan exploitation Derived 152

Claims

Flash-loan exploitation EXPLOITS Pump.fun token-graduation vulnerability

The flash-loan attack exploited the Pump.fun token-graduation vulnerability by redirecting the liquidity funds during graduation.

Derived Confidence 96% · Jack Rhysider EP 152 Details

“using his insider access, he redirected where the Solana was supposed to go”

Jack Rhysider · offsets 35534–35609

Pump.fun token-graduation vulnerability AFFECTS Pump.fun

The vulnerability affected Pump.fun's process for graduating tokens to Raydium.

Derived Confidence 95% · Jack Rhysider EP 152 Details

“for it to graduate out of Pump.fun and into the DEX, Pump.fun sends a bunch of Solana”

Jack Rhysider · offsets 35185–35270

Pump.fun token-graduation vulnerability DISCOVERED_BY Jarett Dunn

Jarett says he reported the vulnerability a couple of weeks before exploiting it, but it was not patched or fixed.

Explicit Confidence 96% · Jarett Dunn EP 152 Details

“I did report it a couple weeks before that. There was just no action to patch it or fix it.”