Pump.fun, a Solana-based platform for launching tokens, has suffered a major security breach, resulting in a loss of approximately $2 million. The attacker leveraged flash loans to exploit the platform’s bonding curve contracts, undermining the token launch mechanism. Flash loans allow users to borrow large amounts without collateral only if they return the funds within the same transaction. The attacker acquired enough SOL through this method to buy out the bonding curves for the meme coins of Pump. fun, which led to vast financial losses.