pump.fun exploited on May 16, 2024 when a former employee retained access to a service account after leaving. The attacker flash-loaned SOL, used it to complete bonding curves to 100%, then drained the released liquidity (~$1.9M-$2M or ~12,300 SOL) to repay the loans.

pump.fun is a Solana-based memecoin generator. On May 16th, the project suffered a $1.9 million exploit by an attacker who then began airdropping the money to somewhat random wallets. pump.fun stated on Twitter that the attack was due to a former employee exploiting their privileges within the company to illegally obtain withdrawal permissions and using a lending protocol to carry out flash loan attacks.