pump.fun bonding-curve platform exploited via compromised private key (pre-PumpSwap)
May 16, 2024outcome unclear- Outcome
- Parent-platform incident; PumpSwap not involved
- Loss
- ~$1.9M
- Recovered or reimbursed
- Not established in sources checked
PumpSwap is the decentralized exchange (DEX) built by pump.fun, the Solana memecoin launchpad. New pump.fun tokens first trade on a bonding curve. When a token completes its curve, it "graduates" and its liquidity moves into a PumpSwap pool, where anyone can trade it 3. PumpSwap launched on March 20, 2025 and replaced Raydium as the graduation destination 3. It is a standard constant-product pool, the same basic design as Uniswap v2 1. You trade from your own Solana wallet, with no account.
A coin launched on pump.fun starts on a bonding curve, a contract that sells the token at a price that rises as more is bought. When the curve fills, the token "completes" and pump.fun's program calls a migrate instruction. That instruction creates the coin's canonical PumpSwap pool and seeds it with the curve's liquidity 1. Before March 2025, graduated tokens went to Raydium and paid a 6 SOL migration fee. PumpSwap removed that fee 3.
For the common search "graduation to Raydium or PumpSwap": pump.fun graduations go to PumpSwap. Anyone can still create other pools for the same token on other DEXs.
Each pool holds two tokens, usually a memecoin and SOL or USDC. The pool prices trades by the ratio of its reserves (x × y = k) 1. Bigger trades move the price more, so check slippage on thinly traded coins. You can trade:
Liquidity providers deposit both tokens into a pool and earn the LP share of trading fees. PumpSwap charges no fee on deposits and withdrawals 1. LPs take on impermanent loss and the price risk of a memecoin that can fall to near zero.
PumpSwap has two fee regimes:
Calculated from DefiLlama data: PumpSwap generated about $116 million in fees on about $9.9 billion of volume over the 30 days to October 23, 2026. That averages about 1.2% of volume, well above the 0.25% base rate 4. The actual fee on a given trade depends on the pool and the coin's market cap, so check the quote before you swap. Solana network and priority fees are extra.
PumpSwap's on-chain program ID is pAMMBay6oceH9fJKBRHGP5D4bD4sWpmSwMn52FMfXEA on both mainnet and devnet 1. pump.fun publishes the program interface (IDL), an SDK and instruction docs in its public GitHub repository 1. The docs name an admin key that can change fee settings and fee recipients and can disable operations 1. PumpSwap is not governed by token holders.
pump.fun launched in January 2024 7. Court reporting names Baton Corporation Ltd, described as UK-based, as its parent company. It names Noah Tweedale as CEO and Alon Cohen as co-founder and COO 6. pump.fun sold its PUMP token in an ICO on July 12, 2025, with a maximum supply of 1 trillion 7. You do not need PUMP to trade on PumpSwap.
In January 2025 a proposed class action, Aguilar v. Baton Corp. Ltd., was filed in the Southern District of New York. It alleges pump.fun operated an unregistered securities exchange 6. These are allegations, not findings.
Hacks in DefiLlama’s public database are also scored as the security record on the PumpSwap (pump.fun) rating page.
DeFiWhat Is a DEX and How Does It Work?A DEX is a decentralized exchange that lets you swap tokens directly from your own wallet using smart contracts, with no company holding your funds.6 min read·
DeFiAutomated Market Makers (AMMs), ExplainedAn AMM is a smart contract that prices and settles token swaps against a pooled reserve using a formula, replacing the traditional order book.6 min read·
ExchangesCEX vs DEX: Which Should You Use?CEX vs DEX comes down to custody, convenience and control. Compare how centralized and decentralized exchanges work so you can pick the right one.5 min read·
TechnologyUnderstanding gas fees on EthereumA guide to how Ethereum gas fees work, why they change, and practical ways to pay less when you transact on-chain.8 min read·
RegulationBitcoin ETF Outflows Weigh on Market as Interactive Brokers Launches Ethereum StakingSpot Bitcoin ETFs recorded $65.4 million in net outflows as hawkish Federal Reserve comments pressured prices. Meanwhile, Interactive Brokers rolled out Ethereum staking for eligible US clients.4 min read·
MarketsCFTC Opens Retail Crypto Leverage Rulemaking as Bitcoin Holds Near $84KThe CFTC has begun a rulemaking on leveraged retail crypto trading, while Bitcoin hovers near $84,000 and traders wait for U.S. inflation data and the Fed’s October meeting.4 min read·
MarketsUS Moves $1B in Seized Bitcoin as Senate Scrutiny of Tether GrowsU.S.-linked wallets shifted 12,267 BTC from a Bitfinex hack seizure address without any exchange deposit, while Senator Richard Blumenthal pressed Cantor Fitzgerald over its Tether partnership.3 min read·In our ratings: See CoinPulse's PumpSwap rating and evidence Related: DEX ratings · Raydium · What is an AMM · Slippage · What is a rug pull