Episode

EP 152 — Stacc Attack

03 December 2024 Official episode · Official transcript

black hat cybercrime bitcoin

The episode examines Jarett Dunn’s exploitation of Pump.fun’s token-graduation process, which redirected Solana liquidity to random addresses, alongside his earlier disruption of the Solana network and concerns about Pump.fun’s platform practices.

Topics: Solana transaction processing and validator infrastructure, Recursive and self-calling transactions, Blockchain denial-of-service and network outages, Pump.fun token graduation and bonding curves, Raydium decentralized-exchange liquidity pools, Flash-loan exploitation, Insider access and fund redirection, Automated asynchronous transaction attacks, Cryptocurrency meme-coin pump-and-dump behavior, KYC and AML controls, Livestream moderation and abuse risks

Official episode-page sources

Links published on the Darknet Diaries episode page. Not LLM output.

Entities (31)

Claims (20)

Qualified statements from this episode, not graph facts.

Pump.fun robbery ATTRIBUTED_TO Jarett Dunn

Jack attributes the Pump.fun robbery to Jarett, who also describes executing the program that redirected funds.

Explicit Confidence 99% · Jack Rhysider EP 152 Details

“Jarett, AKA Stacc, executed a wild and astonishing robbery. He stole millions of dollars in cryptocurrency”

Jack Rhysider · offsets 3147–3253

Pump.fun robbery INVOLVES Pump.fun

The robbery targeted Pump.fun and its token-graduation process.

Explicit Confidence 99% · Jack Rhysider EP 152 Details

“the elaborate and wild robbery of Pump.fun”

Jack Rhysider · offsets 45778–45820

Pump.fun robbery INVOLVES Solana

The robbery redirected Solana that was intended to fund liquidity on a decentralized exchange.

Explicit Confidence 99% · Jack Rhysider EP 152 Details

“he redirected where the Solana was supposed to go”

Jack Rhysider · offsets 35560–35609

Pump.fun robbery INVOLVES Raydium

The attack exploited the process that graduated Pump.fun tokens to Raydium and funded their liquidity there.

Explicit Confidence 99% · Jack Rhysider EP 152 Details

“when enough people buy it, it then gets graduated to Raydium”

Jack Rhysider · offsets 34983–35043

Pump.fun robbery INVOLVES Flash-loan exploitation

The robbery involved repeatedly taking flash loans, buying tokens, and selling them to repay the loans.

Explicit Confidence 99% · Jack Rhysider EP 152 Details

“he took out a flash loan and bought all the tokens needed to graduate the meme coin”

Jack Rhysider · offsets 35356–35439

Flash-loan exploitation EXPLOITS Pump.fun token-graduation vulnerability

The flash-loan attack exploited the Pump.fun token-graduation vulnerability by redirecting the liquidity funds during graduation.

Derived Confidence 96% · Jack Rhysider EP 152 Details

“using his insider access, he redirected where the Solana was supposed to go”

Jack Rhysider · offsets 35534–35609

Pump.fun token-graduation vulnerability AFFECTS Pump.fun

The vulnerability affected Pump.fun's process for graduating tokens to Raydium.

Derived Confidence 95% · Jack Rhysider EP 152 Details

“for it to graduate out of Pump.fun and into the DEX, Pump.fun sends a bunch of Solana”

Jack Rhysider · offsets 35185–35270

Jarett Dunn USES Flash-loan exploitation

Jarett used flash loans as part of the robbery, repeatedly borrowing funds to buy and then sell Pump.fun tokens.

Explicit Confidence 99% · Jack Rhysider EP 152 Details

“His program was working flawlessly. He was taking out flash loans”

Jack Rhysider · offsets 42250–42315

Jarett Dunn USES Liquidity redirection

Jarett used liquidity redirection to send Solana intended for Raydium to addresses he selected or controlled.

Explicit Confidence 99% · Jack Rhysider EP 152 Details

“redirecting the Solana that was supposed to go to the DEX to somewhere else he controlled”

Jack Rhysider · offsets 36204–36293

Jarett Dunn USES Automated transaction attack

Jarett wrote and executed an automated program that attacked thousands of Pump.fun meme coins.

Explicit Confidence 99% · Jack Rhysider EP 152 Details

“he wrote a little program to try to do it to not just one or ten or twenty, but thousands, tens of thousands”

Jack Rhysider · offsets 35700–35808

Pump.fun robbery INVOLVES Liquidity redirection

The incident involved redirecting liquidity funds away from Raydium to other Solana addresses.

Explicit Confidence 99% · Jack Rhysider EP 152 Details

“redirecting the Solana that was supposed to go to the DEX”

Jack Rhysider · offsets 36204–36261

Pump.fun robbery INVOLVES Automated transaction attack

The incident involved an automated program that repeatedly attempted the attack against many tokens.

Explicit Confidence 99% · Jack Rhysider EP 152 Details

“once triggered, it would just automatically try to hit as many meme coins as possible on Pump.fun”

Jack Rhysider · offsets 36455–36552

Pump.fun token-graduation vulnerability DISCOVERED_BY Jarett Dunn

Jarett says he reported the vulnerability a couple of weeks before exploiting it, but it was not patched or fixed.

Explicit Confidence 96% · Jarett Dunn EP 152 Details

“I did report it a couple weeks before that. There was just no action to patch it or fix it.”

Jarett Dunn · offsets 34123–34214

Solana February 2023 outage INVOLVES Solana recursive transactions

The February 2023 Solana outage involved recursive transactions that repeatedly called other transactions or themselves.

Explicit Confidence 98% · Jarett Dunn EP 152 Details

“you could do recursive transactions”

Jarett Dunn · offsets 11182–11217

Jarett Dunn USES Solana recursive transactions

Jarett says he queued recursive transactions, including transactions that called themselves immediately.

Explicit Confidence 99% · Jarett Dunn EP 152 Details

“I was queuing as many recursive transactions as I possibly could”

Jarett Dunn · offsets 10910–10974

Solana February 2023 outage INVOLVES Clockwork

The outage occurred in the context of validators running Clockwork and after Clockwork came back up.

Explicit Confidence 97% · Jarett Dunn EP 152 Details

“the entire Solana network went down when clockwork came back up”

Jarett Dunn · offsets 11508–11571

Solana February 2023 outage INVOLVES Geyser plugin

Jarett says validators could optionally run the Geyser plugin and its associated threads.

Explicit Confidence 95% · Jarett Dunn EP 152 Details

“they can optionally do this Geyser plug in and get additional money by running these threads”

Jarett Dunn · offsets 11019–11111

Solana February 2023 outage ASSOCIATED_WITH Jarett Dunn

Jack says he cannot confirm that Jarett caused the outage, but guesses that Jarett contributed to the problems.

Uncertain Confidence 91% · Jack Rhysider EP 152 Details

“I can’t exactly confirm it was Jarett who took down Solana during that time. My guess is he contributed”

Jack Rhysider · offsets 12551–12654

Pump.fun USES Solana

Pump.fun is described as a platform for creating and trading meme coins on the Solana network.

Explicit Confidence 99% · Jack Rhysider EP 152 Details

“make a meme coin on the Solana network”

Jack Rhysider · offsets 14373–14411

Pump.fun ASSOCIATED_WITH 4Chan

Jack says Pump.fun's site layout looks a lot like 4chan and later describes it as having a strong resemblance to 4chan.

Explicit Confidence 98% · Jack Rhysider EP 152 Details

“The site looks a lot like 4chan”

Jack Rhysider · offsets 14510–14541

Transcript references

Works mentioned in the transcript. Distinct from show-note sources.

Extraction provenance

Model gpt-5.6-luna · prompt 1.5.19 · schema 1.5.19 · 2026-09-13T08:31:25.460029+00:00