Hacked $2M from pump.fun, sentenced to 6 years in prison — he chose to "self-destruct"

Hacked $2M from pump.fun, sentenced to 6 years in prison — he chose to "self-destruct"

In May 2024, a theft occurred on pump.fun, with attackers siphoning off approximately $2 million in SOL and a large volume of meme coins. At the time, the attacker claimed they would randomly airdrop these funds to players on Solana, earning them the nickname “Crypto Robin Hood”.


Jarett Dunn (online alias Stacc), the perpetrator and former pump.fun employee, was sentenced to six years in prison by a London judge in December of last year.



Two days ago, he released a large volume of Telegram chat logs from his time at pump.fun.


I spent extensive time reviewing these chat logs line by line. After finishing, I was stunned—because the records contained nothing resembling intentional misconduct such as pump.fun team manipulation of liquidity or illicit fee harvesting. Nor did they reveal any serious personal ethics violations involving founder alon or other team members.


Yet, in his tweets, Jarett Dunn referred to himself as a whistleblower, framing his disclosure as a “justified explosion.” Some commenters echoed similar doubts, to which he responded:



“These records show I warned them twice that KYC/AML compliance was mandatory before live streaming could be enabled on the platform—yet they ignored it. And we all know how things ended up (referring to the unregulated livestream chaos during pump.fun’s early days).”


If this accusation carries some weight, the next one takes a sharp leap:


“An employee said in the group chat: ‘My friend is already scouting models—once pump.fun goes live with streaming, we’ll go full NSFW.’”


The corresponding chat log shows that pump.fun co-founder Sapijiju shared a Twitch streamer in the company group, noting another streamer had just launched tokens via pump.fun. One employee replied that this streamer was a Rugger who had rug-pulled five tokens the previous day.



Then the same employee mentioned his friend was looking for “models” (to do the same thing). Contextually, this reads more like a joke. However, Jarett Dunn did interject with a suggestion advocating collaboration with a livestream platform—arguing it would avoid KYC liabilities and drastically shorten the timeline for launching livestreaming functionality on pump.fun.



The real issue here should be the team’s apparent indifference toward a known serial Rugger, treating the situation with casual mockery. Founder alon, in the record, said he “felt like he’d seen her profile before,” then left it at that.



Other records reveal pump.fun’s early-stage “shoestring” operations—such as hastily producing employee contracts under investor pressure (despite viewing the documents as “a pile of garbage”), while simultaneously seeking legal counsel to draft new ones. For a young, rapidly scaling project like pump.fun at the time, this hardly constitutes damning evidence.



The most explosive revelation in Jarett Dunn’s disclosed records may be the exposure of the phone numbers linked to alon and Sapijiju’s Telegram accounts. Given privacy concerns, this portion of the screenshots is not included in this article.


So what’s the real grudge? From the logs, I found no clear starting point for Jarett Dunn’s conflict with pump.fun. But he is a talented programmer, diagnosed with paranoid schizophrenia at age 20.


Two years ago, when he attacked pump.fun, his mother had recently passed away. At that time, he had only been with pump.fun for six weeks.


Four days after the attack, he was arrested at a hotel just 90 meters from pump.fun’s London office—where he had been staying. After arrest, authorities deemed him unfit for interrogation and promptly transferred him to a hospital for two weeks of psychiatric treatment; he had been off medication for months prior.


Two months after pleading guilty, he attempted to withdraw his confession during sentencing—a sudden reversal that caused his legal team to disassociate from him.


In September 2023, he tweeted: “I’m homeless now—I’m preparing to sleep in parks, fighting my own bugs over 5G.”



And in the chat logs, pump.fun reimbursed his flight from Canada to the UK. Was he happy then? Was he fulfilled?


Facing such a complex, deeply troubled programmer, I can only offer a silent sigh at the fragility of human existence.




#SOL#pumpfun#Attacker#Alon

Disclaimer: Contains third-party opinions, does not constitute financial advice

Recommended Reading

The worst airdrop of the year, everyone got rug-pulled, branded as "scam"

03-24
The worst airdrop of the year, everyone got rug-pulled, branded as "scam"

Resolv attacker still holds 36.74 million USR, value drops to $2.04 million

03-22
Resolv attacker still holds 36.74 million USR, value drops to $2.04 million

Resolv Suspected Vulnerability: 100,000 USDC Minted into 50 Million USR, USR Plummets 74.2% Instantly

03-22
Resolv Suspected Vulnerability: 100,000 USDC Minted into 50 Million USR, USR Plummets 74.2% Instantly

The Venus attacker has swapped assets such as BNB into ETH, with on-chain data showing that despite investing $9.92 million, only $5 million was recovered.

03-22
The Venus attacker has swapped assets such as BNB into ETH, with on-chain data showing that despite investing $9.92 million, only $5 million was recovered.

Renaiss Protocol: Completes Distribution of $30,000 in Community Rewards, Platform Trading Volume Surpasses $6 Million

03-21
Renaiss Protocol: Completes Distribution of $30,000 in Community Rewards, Platform Trading Volume Surpasses $6 Million

Two major whales collectively offloaded XAUT tokens worth $13.17 million, incurring combined losses exceeding $1.7 million

03-21
Two major whales collectively offloaded XAUT tokens worth $13.17 million, incurring combined losses exceeding $1.7 million

OKX Boost Launches X Launch Project Block Street (BSB), Sharing Over 5.35 Million Tokens in Rewards

03-20
OKX Boost Launches X Launch Project Block Street (BSB), Sharing Over 5.35 Million Tokens in Rewards