Episode
EP 152 — Stacc Attack
03 December 2024
Official episode
·
Official transcript
black hat
cybercrime
bitcoin
The episode examines Jarett Dunn’s exploitation of Pump.fun’s token-graduation process, which redirected Solana liquidity to random addresses, alongside his earlier disruption of the Solana network and concerns about Pump.fun’s platform practices.
Topics: Solana transaction processing and validator infrastructure, Recursive and self-calling transactions, Blockchain denial-of-service and network outages, Pump.fun token graduation and bonding curves, Raydium decentralized-exchange liquidity pools, Flash-loan exploitation, Insider access and fund redirection, Automated asynchronous transaction attacks, Cryptocurrency meme-coin pump-and-dump behavior, KYC and AML controls, Livestream moderation and abuse risks
Official episode-page sources
Links published on the Darknet Diaries episode page. Not LLM output.
Entities (31)
Claims (20)
Qualified statements from this episode, not graph facts.
Pump.fun robbery
ATTRIBUTED_TO
Jarett Dunn
Jack attributes the Pump.fun robbery to Jarett, who also describes executing the program that redirected funds.
Explicit
Confidence 99%
· Jack Rhysider
EP 152
Details
“Jarett, AKA Stacc, executed a wild and astonishing robbery. He stole millions of dollars in cryptocurrency”
Jack Rhysider ·
offsets 3147–3253
Pump.fun robbery
INVOLVES
Pump.fun
The robbery targeted Pump.fun and its token-graduation process.
Explicit
Confidence 99%
· Jack Rhysider
EP 152
Details
“the elaborate and wild robbery of Pump.fun”
Jack Rhysider ·
offsets 45778–45820
Pump.fun robbery
INVOLVES
Solana
The robbery redirected Solana that was intended to fund liquidity on a decentralized exchange.
Explicit
Confidence 99%
· Jack Rhysider
EP 152
Details
“he redirected where the Solana was supposed to go”
Jack Rhysider ·
offsets 35560–35609
Pump.fun robbery
INVOLVES
Raydium
The attack exploited the process that graduated Pump.fun tokens to Raydium and funded their liquidity there.
Explicit
Confidence 99%
· Jack Rhysider
EP 152
Details
“when enough people buy it, it then gets graduated to Raydium”
Jack Rhysider ·
offsets 34983–35043
Pump.fun robbery
INVOLVES
Flash-loan exploitation
The robbery involved repeatedly taking flash loans, buying tokens, and selling them to repay the loans.
Explicit
Confidence 99%
· Jack Rhysider
EP 152
Details
“he took out a flash loan and bought all the tokens needed to graduate the meme coin”
Jack Rhysider ·
offsets 35356–35439
Flash-loan exploitation
EXPLOITS
Pump.fun token-graduation vulnerability
The flash-loan attack exploited the Pump.fun token-graduation vulnerability by redirecting the liquidity funds during graduation.
Derived
Confidence 96%
· Jack Rhysider
EP 152
Details
“using his insider access, he redirected where the Solana was supposed to go”
Jack Rhysider ·
offsets 35534–35609
Pump.fun token-graduation vulnerability
AFFECTS
Pump.fun
The vulnerability affected Pump.fun's process for graduating tokens to Raydium.
Derived
Confidence 95%
· Jack Rhysider
EP 152
Details
“for it to graduate out of Pump.fun and into the DEX, Pump.fun sends a bunch of Solana”
Jack Rhysider ·
offsets 35185–35270
Jarett Dunn
USES
Flash-loan exploitation
Jarett used flash loans as part of the robbery, repeatedly borrowing funds to buy and then sell Pump.fun tokens.
Explicit
Confidence 99%
· Jack Rhysider
EP 152
Details
“His program was working flawlessly. He was taking out flash loans”
Jack Rhysider ·
offsets 42250–42315
Jarett Dunn
USES
Liquidity redirection
Jarett used liquidity redirection to send Solana intended for Raydium to addresses he selected or controlled.
Explicit
Confidence 99%
· Jack Rhysider
EP 152
Details
“redirecting the Solana that was supposed to go to the DEX to somewhere else he controlled”
Jack Rhysider ·
offsets 36204–36293
Jarett Dunn
USES
Automated transaction attack
Jarett wrote and executed an automated program that attacked thousands of Pump.fun meme coins.
Explicit
Confidence 99%
· Jack Rhysider
EP 152
Details
“he wrote a little program to try to do it to not just one or ten or twenty, but thousands, tens of thousands”
Jack Rhysider ·
offsets 35700–35808
Pump.fun robbery
INVOLVES
Liquidity redirection
The incident involved redirecting liquidity funds away from Raydium to other Solana addresses.
Explicit
Confidence 99%
· Jack Rhysider
EP 152
Details
“redirecting the Solana that was supposed to go to the DEX”
Jack Rhysider ·
offsets 36204–36261
Pump.fun robbery
INVOLVES
Automated transaction attack
The incident involved an automated program that repeatedly attempted the attack against many tokens.
Explicit
Confidence 99%
· Jack Rhysider
EP 152
Details
“once triggered, it would just automatically try to hit as many meme coins as possible on Pump.fun”
Jack Rhysider ·
offsets 36455–36552
Pump.fun token-graduation vulnerability
DISCOVERED_BY
Jarett Dunn
Jarett says he reported the vulnerability a couple of weeks before exploiting it, but it was not patched or fixed.
Explicit
Confidence 96%
· Jarett Dunn
EP 152
Details
“I did report it a couple weeks before that. There was just no action to patch it or fix it.”
Jarett Dunn ·
offsets 34123–34214
Solana February 2023 outage
INVOLVES
Solana recursive transactions
The February 2023 Solana outage involved recursive transactions that repeatedly called other transactions or themselves.
Explicit
Confidence 98%
· Jarett Dunn
EP 152
Details
“you could do recursive transactions”
Jarett Dunn ·
offsets 11182–11217
Jarett Dunn
USES
Solana recursive transactions
Jarett says he queued recursive transactions, including transactions that called themselves immediately.
Explicit
Confidence 99%
· Jarett Dunn
EP 152
Details
“I was queuing as many recursive transactions as I possibly could”
Jarett Dunn ·
offsets 10910–10974
Solana February 2023 outage
INVOLVES
Clockwork
The outage occurred in the context of validators running Clockwork and after Clockwork came back up.
Explicit
Confidence 97%
· Jarett Dunn
EP 152
Details
“the entire Solana network went down when clockwork came back up”
Jarett Dunn ·
offsets 11508–11571
Solana February 2023 outage
INVOLVES
Geyser plugin
Jarett says validators could optionally run the Geyser plugin and its associated threads.
Explicit
Confidence 95%
· Jarett Dunn
EP 152
Details
“they can optionally do this Geyser plug in and get additional money by running these threads”
Jarett Dunn ·
offsets 11019–11111
Solana February 2023 outage
ASSOCIATED_WITH
Jarett Dunn
Jack says he cannot confirm that Jarett caused the outage, but guesses that Jarett contributed to the problems.
Uncertain
Confidence 91%
· Jack Rhysider
EP 152
Details
“I can’t exactly confirm it was Jarett who took down Solana during that time. My guess is he contributed”
Jack Rhysider ·
offsets 12551–12654
Pump.fun
USES
Solana
Pump.fun is described as a platform for creating and trading meme coins on the Solana network.
Explicit
Confidence 99%
· Jack Rhysider
EP 152
Details
“make a meme coin on the Solana network”
Jack Rhysider ·
offsets 14373–14411
Pump.fun
ASSOCIATED_WITH
4Chan
Jack says Pump.fun's site layout looks a lot like 4chan and later describes it as having a strong resemblance to 4chan.
Explicit
Confidence 98%
· Jack Rhysider
EP 152
Details
“The site looks a lot like 4chan”
Jack Rhysider ·
offsets 14510–14541
Transcript references
Works mentioned in the transcript. Distinct from show-note sources.
Bitcoin Whitepaper
article
Decrypt
website
Darknet Diaries
podcast · Jack Rhysider
Extraction provenance
Model gpt-5.6-luna · prompt 1.5.19 · schema 1.5.19
· 2026-09-13T08:31:25.460029+00:00