Urolithin A

Decentralized science (DeSci) platform Pump Science apologized to its users after its private key was leaked on GitHub, allowing a “known attacker” to create fraudulent tokens using its Pump.fun profile.&nbsp;
“We do not want to diminish how much of a screw-up this was, we totally acknowledge that this is a huge issue and misstep on our part,” Pump Science’s Benji Leibowitz <a data-ct-non-breakable="null" href="https://x.com/pumpdotscience/status/1861867769018601780" rel="null" target="null" text="null" title="null">said</a> in an ask-me-anything (AMA) session hosted on X on Nov. 27.
“This absolutely will not happen again,” he said, adding: 
<blockquote>
 “We’re never gonna launch tokens on pump.fun ever again.”
</blockquote>
In <a data-ct-non-breakable="null" href="https://x.com/pumpdotscience/status/1861080069021827114" rel="null" target="null" text="null" title="null">earlier</a> X posts on Nov. 25 and 26, Pump Science <a data-ct-non-breakable="null" href="https://x.com/pumpdotscience/status/1861498997917331611" rel="null" target="null" text="null" title="null">explained</a> that private keys linked to its <a data-ct-non-breakable="null" href="https://cointelegraph.com/explained/what-is-pumpfun-a-guide-to-solanas-memecoin-generator" rel="null" target="null" text="null" title="null">Pump.fun profile</a> (pscience) were leaked on its GitHub, allowing the hacker to use it to create new, fraudulent tokens, including Urolithin B through to Urolithin E ($URO) and Cocaine ($COKE).
“Do not trust any new tokens launched from the pscience PumpFun profile,” Pump Science stressed.&nbsp;
<blockquote>
 “These were not created by our team and this wallet is compromised.”
</blockquote>
Since the incident, Pump Science has <a data-ct-non-breakable="null" href="https://pump.fun/profile/dont_trust" rel="null" target="null" text="null" title="null">changed</a> its Pump.fun profile name to “dont_trust” to prevent people from buying fraudulent tokens, and it said it has partnered with blockchain security firm Blockaid to flag new mints coming from this address.
<figure>
 <img alt="Security, Private Keys, Medicine, Hacks, Memecoin" src="https://s3.cointelegraph.com/uploads/2024-11/0193700b-b7d1-7378-8a24-1b7be0d5679d" title="">
 <figcaption style="text-align: center;">
 Source: <a data-ct-non-breakable="null" href="https://x.com/pumpdotscience/status/1861499053030416584" rel="null" target="null" text="null" title="https://x.com/pumpdotscience/status/1861499053030416584">Pump Science</a>
 </figcaption>
</figure>
Pump Science partially blamed Solana-based software firm BuilderZ for leaving the private key for the <a data-ct-non-breakable="null" href="https://cointelegraph.com/explained/crypto-wallets-explained" rel="null" target="null" text="null" title="null">developer wallet address </a>“T5j2U…jb8sc” in its GitHub codebase, mistakenly assuming the private keys were for the test wallet, not the dev wallet.
The DeSci platform said the attacker couldn’t have been BuilderZ because the mechanism by which the tokens were brought on Solana’s chain differed.
Pump Science <a data-ct-non-breakable="null" href="https://x.com/pumpdotscience/status/1861080158926426243" rel="null" target="null" text="null" title="null">suspects</a> the hacker was the same person or group that hacked a wallet owned by James Pacheco, a founder at Solana-based commodity tokenization platform elmnts.
<a data-ct-non-breakable="null" href="https://cointelegraph.com/news/science-desci-baldness-medicine-decentralization" rel="null" target="null" text="null" title="null">The DeSci protocol</a> said it would conduct a “complete audit” of its front end and for future releases, run a bug bounty for penetration testing of the protocol and explore improved solutions for key management and security.
“New tokens will launch on pump science only after we have fully audited the app and smart contracts to ensure pump science is secure. Hopefully, we can make it by the holidays.”
Related: <a data-ct-non-breakable="null" href="https://cointelegraph.com/news/desci-emerging-defi-did-around-2019-andrew-kang" rel="null" target="null" text="null" title="null">Decentralized science is like early DeFi in 2019: Crypto VC</a>
Pump Science’s platform allows the trading of tokens tied to <a data-ct-non-breakable="null" href="https://cointelegraph.com/news/what-can-blockchain-do-for-increasing-human-longevity" rel="null" target="null" text="null" title="null">longevity medicines. </a> Its only two tokens are Rifampicin (RIF) and Urolithin A (URO), which boast market caps of $85.6 million and $37.2 million, respectively, CoinGecko <a data-ct-non-breakable="null" href="https://www.coingecko.com/en/categories/pump-science-ecosystem" rel="null" target="null" text="null" title="null">data</a> shows.
Rifampin is used to treat tuberculosis, while Urolithin A is a <a data-ct-non-breakable="null" href="https://cointelegraph.com/news/why-longevity-matters-to-everyone-living-longer-lives-in-the-world-of-web3" rel="null" target="null" text="null" title="null">dietary supplement</a> that modulates mitochondrial activity, offering potential antioxidant and anti-inflammatory benefits.
Magazine: <a data-ct-non-breakable="null" href="https://cointelegraph.com/magazine/anti-aging-multi-millionaire-bryan-johnson-almost-devoted-life-crypto/" rel="null" target="null" text="null" title="null">Anti-aging tycoon Bryan Johnson almost devoted his life to crypto</a>

Huge ‘screw-up’ — Pump Science apologizes after flood of fraud tokens

Cointelegraph

Other articles published on Nov 28, 2024

November Sets Yearly High for Stablecoin Trading with 77% Surge

MetaMask Lets US Clients Buy Crypto with Venmo

Getimg AI: Transforming Creativity with AI-Generated Hairstyles

Justin Sun Drops $6.2M on Controversial Banana Art, Calls It a "Cultural Phenomenon"

Why Ethereum’s Weekly Chart Breakout Could Signal a Bullish Year Ahead

Injective Unveils iAgent SDK to Automate Blockchain Tasks with AI

Join our free newsletter for daily crypto updates!