152: Stacc Attack

3 Dec 2024 · 53 min

Ask about this episode

Ask anything about it. ChatGPT or Claude reads this page and answers with the times it was said.

Connect VO and ask about every podcast you hear, including the moments you saved. Add to ChatGPT · Add to Claude

In short

Darknet Diaries Episode 152: Stacc Attack

Episode Overview In this episode of *Darknet Diaries*, host Jack Rhysider delves into the audacious exploits of Jarrett Dunn, also known as StaccOverflow, who executed a significant heist targeting a cryptocurrency platform called Pump Fun. The heist became infamous as the “Stacc Attack,” resulting in millions of dollars being stolen in a dramatic and theatrical fashion.

Key Characters

  • Jack Rhysider: Host of *Darknet Diaries*.
  • Jarrett Dunn (StaccOverflow): The perpetrator of the heist, who stole millions from Pump Fun.

Major Themes The Nature of Meme Coins

  • Definition: Meme coins are cryptocurrencies that often lack inherent value, existing primarily as jokes within the community.
  • Example: Pump Fun is a platform where users can create and trade meme coins rapidly, fostering a gambling-like environment.
  • Insight: Many participants in the meme coin market are aware of the absurdity of their actions yet engage in it for entertainment.

The Heist

The Stacc Attack

  • Motivation: Jarrett, motivated by personal grief and a desire for dramatic expression, decided to exploit vulnerabilities within the Pump Fun platform.
  • Execution:
  • Used a program to take out flash loans, facilitating the graduation of meme coins from Pump Fun to a decentralized exchange (DEX).
  • Redirected funds meant for the exchange to his own controlled wallets.
  • The heist culminated in the theft of approximately 12,600 Solana coins, valued at around $2 million.

Personal Struggles and Psychological Insights

  • Jarrett's Backstory:
  • Grew up with a complicated family dynamic and struggled with mental health issues, including substance abuse and psychotic episodes.
  • Grieving the death of his mother weighed heavily on him, influencing his decision-making.
  • Mental Health Context:
  • Jarrett was off his medication during the heist, leading to impaired judgment and clarity on the consequences of his actions.

Consequences and Repercussions

  • Impact on Pump Fun:
  • The platform had to reimburse affected users, ultimately becoming the biggest loser in the scenario.
  • Pump Fun's operations were questioned, including their lack of regulatory measures and potential ethical implications.
  • Legal Fallout:
  • Jarrett was arrested shortly after the heist, facing significant legal repercussions, including a potential prison sentence of up to 14 years.

Discussion Points Ethical Considerations in Cryptocurrency

  • KYC and AML Issues: The lack of regulatory measures on platforms like Pump Fun raises concerns about the potential for exploitation and abuse.
  • Responsibility: Jarrett's actions raise questions about personal accountability versus systemic issues within the cryptocurrency space.

Cultural Reflections

  • Behavioral Economics: The allure of gambling and the impulsivity associated with meme coins reflect broader societal behaviors in digital marketplaces.
  • Community Dynamics: The interaction between anonymity, financial advice, and the potential for exploitation in online platforms highlights the need for greater oversight.

Conclusion The episode of *Darknet Diaries* exploring Jarrett Dunn's heist serves as a fascinating case study of the intersection between personal tragedy, the playful yet dangerous world of cryptocurrency, and the ethical dilemmas posed by unregulated digital platforms. As the episode closes, the future of Pump Fun and the implications of Jarrett's actions remain uncertain, leaving listeners with much to ponder about the chaotic landscape of the cryptocurrency market.

Suggested Further Reading

  • The evolution of meme coins in cryptocurrency.
  • Regulatory challenges facing cryptocurrencies and decentralized platforms.
  • Personal narratives on the impact of mental health issues in tech and finance.

Written by AI. May contain mistakes. Listen to the episode to check what was said.

Hear the part that matters, and keep it.Open this episode in VO. Double tap your headphones to save a moment as you listen.
Get VO free

Transcript

Automatic transcript. May contain errors.

0:00The dumbest thing I ever bought is a Canon DSL camera 5D Mark II. Somewhere around 2007, I started getting into photography. DSLR cameras were just getting popular, and I wanted one. But I was too poor to afford it. I was obsessing over the Canon Rebel cameras, wishing I could have one, constantly looking at eBay to see what was out there. And every now and then, I'd find one undervalued, listed way below what it should be at. And so I bought the cheap one, and I used it for a few days, and then sold it for more than I bought it. I did that three times and eventually had enough money to get the camera for myself.

0:40Basically, it was a free Canon Rebel. And I used the crap out of it. I probably took thousands of photos with it. I shot models sometimes, but my favorite was architecture. I especially loved Derelect or abandoned buildings. And after a year of taking all these photos, Canon was launching a new camera, the 5D Mark II. Oh, how I started wishing I could get that. and for some reason, I just couldn't resist and I pre-ordered it. The thing cost$2 ,500 and it was absolutely something I could not afford at the time but I thought it was my ticket to becoming a professional photographer so I spent every last penny I had on it and even went into debt to buy it.

1:25Oh, it was amazing. Full frame sensor, it took perfect photos but here's the problem. I felt this thing was way too expensive to take anywhere. Like if I'm walking around in abandoned buildings with thousands of dollars in camera gear around my neck, I might get robbed. And if it got scratched, I would have cried. So I never took that camera anywhere and brought my cheaper one with me instead. The one I didn't mind if it got broke or stolen. But this changed my whole relationship with photography after that. I had all this camera gear, and because I was too afraid to use it, I didn't shoot much at all.

2:00I realized my dreams of being a pro photographer were done, and it was a dumb idea to buy this thing. I don't know what I was thinking at the time, so I tried selling it. But the thing is, selling something that expensive is tricky. You could easily get scammed or robbed, and it was very nerve-wracking. On top of that, nobody was really buying these super high-end cameras, so I ended up selling it for way less than what I paid for it. Now, I say that was the dumbest thing I bought because yesterday I bought something way dumber.

2:36These are true stories from the dark side of the internet.

2:43I'm Jack Recider. This is Darknet Diaries.

3:04This episode is sponsored by NetCraft. Every Darknet Diary story starts with a scam, a breach, or a crime. NetCraft works behind the scenes to not only disrupt the threat, but to remove the infrastructure that enables adversaries to launch more attacks. Uncovering phishing kits, dismantling malware networks, and disrupting brand abuse at scale, Netcraft stops threats across the open web, social platforms, and the dark web. Trusted by leading internet and infrastructure providers and brands large and small, they clean up the web a little more every day. Proudly earning one-star reviews from cyber criminals and five-star reviews from customers, Netcraft's automated brand protection platform sifts through the noise to deliver high-fidelity signal that powers takedowns at any scale.

3:47Keep your story off this podcast by learning more at netcraft.com slash dnd. That's netcraft.com slash dnd.

4:04This episode is sponsored by my friends at Black Hills Information Security. Black Hills has earned the trust of the cybersecurity industry since John Strand founded it in 2008. Through their anti-siphon training program, they teach you how to think like an attacker. From SOC analyst skills to how to defend your network with traps and deception, it's hands-on, practical training built for defenders who want to level up. Black Hills loves to share their knowledge through webcasts, blogs, zines, comics, and training courses, all designed by hackers. For hackers! But do you need someone to do a penetration test to see where your defenses stand?

4:38Or are you looking for 24-7 monitoring from their active SOC team? Or maybe you're ready for continuous pentesting, where testing never stops and your systems stay battle-ready all the time. Well, they can help you with all of that. They've even made a card game. It's called Backdoors and Breaches. The idea is simple. It teaches people cybersecurity while they play. Companies use it to stress test their defenses. Teachers use it in the classroom to train the next generation. And if you're curious, there's a free version online that you can try right now. And this fall, they're launching a brand new competitive edition of Backdoors and Breaches, where you and your friends can go head to head, hacking and defending just like the real thing.

5:13Check it all out at blackhillsinfosec.com slash darknet. That's blackhillsinfosec.com slash darknet.

5:27Yeah, all right. So let's start at the beginning here. First of all, what do you want to be known as if I call you names? Yeah, it's fine. Jert Dunn works. I'm all over the internet and I'm full of dogs. It's perfectly fine. And then if not, then most people would know me as Stack, I guess, or Stack Overflow. I'm going to jump to the chase for you right now. Jarrett, aka Stack, executed a wild and astonishing robbery. He stole millions of dollars in cryptocurrency, which is why I call this episode Stack Attack. But his grand heist is so different that it had me questioning far more than stolen money.

6:06It cracked open a door that I didn't even know was there, leading me through a maze of questions that I'm still trying to find my way through. And it's also a story I think a dozen people have told me to look into at this point. Have you heard of meme coins? They're like jokes, but in the form of cryptocurrency? They're really weird, and nobody seems to understand why they have any value at all. Yeah, there's no inherent value. The whole pitch is that there is no pitch. And you might say, oh, I would never buy something with no value. Oh, yeah? then are you saying you never bought name brand clothes or food or medicine?

6:39The store brand, ibuprofen, has the exact same ingredients as the Advil brand. And it's just as effective and is honestly the exact same product. Yet people still prefer the Advil brand even though it costs twice as much. And that's marketing for you. That's storytelling for you. Stories alone give value and meaning to otherwise meaningless or valueless things. So anyway, people are buying cryptocurrencies simply as a joke. Almost like they're laughing at themselves. Like they know they're buying a meme coin and it's a stupid idea. But they're like, yeah, let's do that. And then they feel stupid even after doing it.

7:19It's very strange. Now, are you into like, do you like crypto and NFTs? Or is this like something you're just like poking at and making fun of and being like, what idiots are buying all this stupid stuff? I should I guess give a lot of context I'm mad at context it's raging autism so I've been in crypto since maybe 2011 or 12 I used to make YouTube videos the intro I used to give was I have lost multi-millions many times over and say I'm still here grinding now I've kind of fallen disillusioned now I used to really believe in the revolutionary aspect of this entire thing and kind of separation of finance and state and all that fun stuff and I was very much on board with causing a lasting change, I guess.

8:02But I've kind of been disillusioned, and I'm not really sure where I fit in the spectrum of a believer or not these days because it pays the bills. However, I have this looming court case, and so I don't really know where I stand. I'm a developer. I'm not a very great developer. Somebody recently described me as a Sephag programmer, but I don't believe so. I connect thoughts really well, and I've contributed, I guess, to, well, the coin, Ethereum, something. It contributed heavily to Steam and it was actually a blog producing witness on a bunch of sidechains. I believe I've been around with EOS for a while.

8:33I went to WAX. WAX is a gaming chain that's like Neal's work or like a very close to EOS. And then the thing is, Solana is built different and they really do tailor the entire thing to welcome and promote new developers. And so once I found Solana, I kind of found a place for myself, I guess. So he's contributed to the development of many cryptocurrency projects out there. And it was Solana, the fifth largest cryptocurrency that he felt most at home in. And he put his focus there. But one thing Jarrett just can't help doing is looking for bugs in the code that can be exploited for money. Because if a bug is present in a crypto project, it could result in catastrophic losses for everyone involved.

9:12The bug hunting. I'm trying to get a square understanding of this because are you looking for bugs and then reporting them so they get fixed? Or are you looking for bugs and then exploiting them? So I will tell you, I have in the past reported any number of bugs that have gone on deaf ears. Reported bugs all over the place. So I reported a bug to Radium and Orca Whirlpools at one point. Orca dismissed it as out of scope because they don't support that particular program, I guess. I don't know why. And then also Radium, they got all of me in DMs and basically said, there's nothing we could do to prevent good market behavior.

9:46So that's that kind of wall you hit. In short, no, I usually try to report these things. In total, I've been paid, I think, two bulk bannies that are significant. Jarrett claims that he had information about FTX's downfall before it became public. FTX was a huge crypto exchange that was discovered to be mismanaging its money and lying about it, and the founder ended up going to jail. A lot of people lost a lot of money because of it. And Jarrett tried to warn his government by telling them to look into FTX. In November 2022, I withdrew my reapplication to Canadian forces, hoping to bring my concerns to the right people about FTX perhaps make a difference.

10:22However, the recruitment process took too long, and by the time I withdrew my application, damage had already been done in the broader crypto ecosystem. Knowing now that should I ever be left in a moral conundrum with hundreds of millions in user funds at risk, surely leading to another bloodbath of worldwide suicides, the only way to be heard is to a dramatic and impactful action, because without a theatrical display, nobody ever really listened. He wished he could have been more dramatic and theatrical to warn people about the FTX collapse? That makes me wonder what he's thinking here. Like, what does it mean to be more theatrical about warning people?

10:57What do you consider yourself? Are you trying to make things better? Are you securing the internet to the crypto? Are you evangelizing it? Or are you sticking your finger in someone's eye? I really wish I knew. I really wish I knew. If I knew, I would have some kind of idea of where I'm going. Even in 2023, you didn't have a clear direction? No, not at all. In 2023, that was the first anniversary after my mom's death. The 25th there, when they released that outage report, I was very deep into grief. How did your mom die? She was... Marcy. Candida killed her. She fell and broke a hip, and she was interoperable, so they put her out of her misery.

11:36Oh, my gosh. That must have been so sudden and surprising. Yes, it was. So she was already out. We knew she was on the way out, and it's a very long story, But it is what it is, and it's probably for the better. I just still struggle with, it's been a very important day of the year. I struggle. Jarrett had a hard time coping with the death of his mother. He loved her dearly. She was everything to him. But it was a complicated relationship. I read his psychiatric report. It said she had her own mental health issues and would do crazy things like set her own house on fire. So Jarrett came home from school three different times with his house on fire.

12:16He got addicted to cocaine early on when he was like a teenager and just had a wild upbringing. And he wanted me to add that the psychiatric report is questionable since the NHS screwed it up a little bit by putting the wrong ID on there and misspelled his last name. In February 2023, he was grieving her loss pretty hard because it was the one-year anniversary of her death. And he turned to his computer to cope, Perhaps that's a safe outlet if he's just playing video games or watching YouTube. But what he decided to do was attack the Solana network. Solana is a type of cryptocurrency. It's the fifth biggest coin in terms of market cap.

12:58It's kind of a big deal. And Jarrett knew some of its weaknesses. So he started messing with it. I was out of my mind, always grieving, and I was trying to do as much damage I could. So I was queuing as many recursive transactions as I possibly could. The validator is running Clockwork because they can optionally do this Geyser plugin and get additional money by running these threads. Clockwork is a scheduling software. The thing is, I figured out that you can do recursive transactions. So you actually have a transaction that calls another transaction in the same slot. Which obviously, if you have enough money to pay Piper, that's terrible for blockchains or any competing network.

13:31All went down again, and a couple days later, I was asleep or in a coma, and the entire spam and all went down when Clockwork came back up. He was able to generate block sizes so large that it overwhelmed the network and transactions were getting clogged. Of all of the transactions by byte size, I was 4%. I was the user or bot submitting 4 % of everything on Solana in that particular block. Yes, or for a few. How did that? You must have had a really beefy system. No, it was just using their threads. So I was queuing transactions that would then call themselves on-chain whenever there were certain conditions met.

14:07However, I then found out that I could just have them call themselves immediately, which is the recursion that I think got broken. Solana reported a 20-hour outage on February 25th, 2023. They experienced unusual block sizes, which when rebroadcasted through the network, ended up degrading the service. So they put Solana in maintenance mode to fix the problem. Essentially, no Solana transactions could occur pretty much that whole day. And I can't exactly confirm it was Jarrett who took down Solana during that time. My guess is he contributed to whatever problems that were going on. But the thing is, is that he was never blamed for this.

14:45Solana never came out and said they know who did it or anything like that. I have to admit, I didn't think it was possible to cripple a cryptocurrency's network so badly that it can be taken offline like this. Two billion dollars are traded every day on Solana. And for all that to come to a halt because some guy is having a bad day, That's just wild to me. How did you get started with PumpFun? Totally the CBO salon. I lost a coin on April Fool's Day, April 1st of this year. And it was called BunkerCoin. I bought it and I appeared back. And all I did was copy the first half of a paragraph from the Bitcoin white paper and threw it in there.

15:21And then I threw up a PumpFun coin. It's the very first time in my life I've ever used PumpFun at that point. And I called it BunkerCoin Futures. And it's April Fool's Day. But it filled immediately. I didn't expect anything to happen. and once I got back in bed, I went back to the theater. My two salon would become ten salon, which is significant. So I guess I was hooked on the casino at that point.

15:47Pump Fun. To research this episode, I actually created an account on there and used the site for a few days. And he's absolutely right. It feels like a casino and it's pretty addictive because of that. And the meme coins I bought on there yesterday absolutely are the dumbest things I ever bought in my life. I kept finding myself lost in a daze, staring at the screen, watching my bags. Then suddenly waking up realizing I'm betting on memes. And I say to myself, what in the world are you doing? So what PumpFun is, it's a place that anyone could go to and make a meme coin on the Salana network. It's very easy and fast.

16:23And then others can buy your meme coin from you if they want on the site. The site looks a lot like 4chan. And as you're there, you're just bombarded with endless messages of new coins being created and what coins people are buying and selling. And it's wildly popular. So before your eyes, you're watching a coin get created by someone. And then hundreds of people are buying that coin, all in the first five minutes of it existing. And I only went there to research this place. I only spent like a few bucks on meme coins. Like for$2, you can buy 30 ,000 meme coins. As I used the site myself, I got familiar with the game.

16:54It's called Pump Fun because the game is to pump and dump. A meme coin's relevancy only lasts a few minutes sometimes. Then it crashes into oblivion. So the game is to jump in on a coin, hoping more people are going to buy it after you do. And if they do, your holdings go up. And then you need to get out before that goes back down. And so the people holding that coin will use every strategy they can to get others to buy it after them. And as I played this game, I too became someone trying to convince others to get in on this coin. It's hot. Pump it. And then as soon as they jump in, I jump out.

17:31Dump it. It's ruthless in that way. Because you see the other people who are buying the coin and you want to think they're on your team. They're going to help you pump it. But no, they're just looking for a way to get out before you do. Everyone's trying to take each other's money. And that's the game. That's the gamble. And I think that's what draws a lot of people to come play at the site. One of my favorite towns to visit is Las Vegas, and everyone knows when you gamble, the house always wins. It's a rigged game. Yet they still gamble. They put their luck on the line and bet real money even after knowing the games they're playing are not fair.

18:03But I love Las Vegas because there's nowhere else in the world which is as wild and crazy as it. It's incredibly entertaining and fascinating to experience, and I learn a lot from that town, such as how to stay focused in a chaotic environment, how to see through the glitz and glam and notice what something really is. And maybe even a glimpse of what humanity is really like. I met some people who use PumpFun regularly, and even they think what they're doing is laughable. Like he was telling me he may bank off of fart coin or a squirrel called Peanut the other day or something ridiculous. Because when you're buying meme coins, you're buying something that is just so bizarre that you end up questioning your own sanity.

18:43But it's fun because it's interesting and weird and we all like interesting things you go there uh you make a token you share with your friend and your family and then they come in and buy an appy it's on a bonding curve so the first person that buys buys it the very cheapest and as people as more people buy it was only buyers for instance the price just continues to go up per token so uh the idea is that you eventually sell your tokens for a game after you you have shared it with close friends and family uh for them to buy after you whether that's your tour for their friends or not or however you want to describe it legally as friends and family.

19:16And then you make a gain on their loss, essentially. And that's basically it. It's made to look like fortune, I guess, with the comments and such. And there's a cute little interface flashing lights on the landing page. You say cute little interface. I'm looking at it now. It is ugly. Yes, it is. It is horrifying. The site is right out of bizarro internet land. The layout is weird. The images and coin names are a cringe. It's all moving way too fast for anyone to be able to read. Things are jumping off the screen, constantly trying to get your attention. And so Jarrett was playing around on the site quite a bit, launching coins, running trading bots, and being pretty active on PumpFun, tweeting about it too.

19:55And I recruited on LinkedIn at all means. You should apply for a couple jobs. And I said, sure, why not? Regredgingly, actually. And I had like two or three interviews with Pump, different finders, and I got an offer. So they paid for my passport, paid for my flight, paid for a couple other things. I got a thing-day renewal of my passport. and a ticket that was actually the same night, and then I flew over to the UK. I've only left Canada once in my life before this. So Jared got hired by PumpFun and moved to the UK, and he knew this was a crazy idea, to move to a new country for some wacky crypto project, but was excited about it too.

20:28I was just excited just to work in a real office again. I've been remote first since like 2013, when I worked for Research in Motion, was my last in-person job. Like the guys that literally called themselves BlackRand, they're now in a business. It's a long career of isolation and addiction and stuff, I really wanted to be part of an organization that was young and fit and looking forward to achieving stuff. They were already one of the number one earning apps anywhere in crypto. It's a very long story. I don't really know, but the main thing is I wasn't on my medication. Probably not thinking straight, that's one thing.

20:56What was the medication you're on? I'm on antipsychotics once a month via Depo, and I'm also on Alvance or Vyvanse. You're in America, so Vyvanse. I have 50 million years up there. What does that treat? Vadiation. Okay, so you go to London. You meet with the creators of this. What is your opinions of them? Oxford, yeah. Yeah, I flew to Oxford. They're all younger. They're all in student housing in Oxford. There was this black tie event they threw. It was their second masquerade or third or whatever. What was your first opinion of them? I don't really know. I didn't anticipate the CTO was the CTO.

21:31I actually mistook them as an employee. They're all young 20s and very unexperienced, I guess is the word. How many people were there? There's three co-founders, and I was the first hire outside the founding team. He moved into a shared living space with the other co-founders. But after a short while, they all moved to London and got an Airbnb there for everyone to stay at. And they also rented an office. We got a rental last minute across from the Buckingham Palace via booking.com, which was the Buckingham Gate Residences. This was actually a pretty posh place they rented for the team to do work out of.

22:07And if you're wondering, how does PumpFun make money? Well, they charge a 1 % fee for every trade that happens on the site. So I'll send you this link in a second. Let me just load it up for a second. Yesterday they made, that's actually gone down a whole bunch. They made$520 ,000 yesterday. Okay, let me look at it. Yeah, well, I am. $340 million in fees they've collected? Yes. That's not including TVL. That's just fees. the site is apparently crazy popular tens of thousands of meme coins are made every day there and they were experiencing explosive growth no wonder they wanted to hire developers the site was probably barely able to stay on the tracks and it's strange to me that this is the wacky world we live in where joke tokens have such a wild demand where the site creators can make hundreds of millions of dollars from this.

Read the full transcript

23:00And see, here's the thing for me. I want to understand the world. I want it to make sense. And whenever I learn about something that doesn't make sense at all, I used to dismiss it and say, ah, those people are obviously stupid or that's fake or that's wrong or something. But now when I hear something really absurd, I lean into it and I stay there until it makes sense to me. Like, I still don't understand why the game Banana is the third most popular game on Steam. Can somebody please explain that to me? Most of the time, when I figure out a mystery like that, it's a big waste of time for me because I'll just learn that I was lied to on the onset and I saw something fake or something which made me believe something else.

23:36But in this case, we can see exactly how much money this site is making because the blockchain is public for anyone to see. And yeah, they've made hundreds of millions of dollars on this site. How are meme coins so popular that millions of dollars are being spent on them every day? The more Jarrett learned about PumpFun, the more concerned he grew with the whole company. Like to start with, one of the first things that happened when he arrived is they held a black tie party, which was wild. Outrageous. There was a horse, like a miniature horse. There was fire dancers. There was 200 oysters that were bought.

24:05We spent like 20 ,000 dollars on the bar. He started thinking this place is more crazy than he realized. In short, I think they're committing any number of, that one's tens of thousands of times a day, actually, because there's like 20 ,000 of these tokens launched every day. The first thing that I didn't really give much thought to There's no KYC or AML across the entire board. Okay, so KYC is Know Your Customer, and AML is Anti-Money Laundering. Personally, I don't want anyone in the world to know I bought a meme coin from this place, so I definitely don't want to be putting my actual name as the owner of that.

24:39And think about if I went into a casino in Vegas to gamble. There's nobody collecting my name before I can gamble there. But regulations are starting to come up everywhere in crypto land, and it's very difficult to know what to follow and how. So I'm just not sure if the site is required to do any KYC or not. Then Jarrett also thinks that there's a whole financial advice problem on the site. See, the government has made it illegal for me to give you financial advice. If I wanted to give you financial advice, I'd have to be registered with the SEC. And Jarrett tells me that there are loads of people on PumpFun who are, in fact, giving financial advice, saying things like, buy this crypto coin and you'll get rich.

25:19Is that illegal? Jarrett thinks so. So he tells me the site's official stance is that we're all friends and family on the site because you can give financial advice to your friends and that's not illegal. I looked on the site for a privacy policy or a terms of service and they don't exist. So from what I can tell, the site does not post any rules of what's allowed or not allowed. But there's one part of the site which is worth mentioning. To launch a coin, you need to create an account, name the token, give it a logo or something. But to pump it, you can go live, flip on your camera, and tell the world why they should be buying your token.

25:58And of course, because you're the creator, if the token goes up, you make money. But can you think of any problems that might arise on a site where you can make money live streaming and everyone is anonymous and no age checks are required? So the live streaming feature. So if you go and create a coin, and actually it'll show you on that landing page if anybody's live-streaming, and you can kind of get the gist. This was one of the things that caused me very much grief. I remember I said to my friend's boyfriend, how could I work on this feature? Their live streaming platform allows for the sexualization of young girls for financial gain, operating without KYC or anal protections, thus exacerbating potential for exploitation and abuse.

26:36So basically, anybody can live stream on a site. And what that really means and how this came to be, in fact, or how they noticed it while I was there, is that questionably of age girls who were sexualizing themselves on camera, as a live streaming platform for sex gamers, whatever you call them, cork in. The point is there's no KYC. There's no even attempt to prove that anybody's out of age. So for instance, when one of the founders joined one of these streams that were happening on Telegram at the time because they were excited and wanted to integrate it live and the cycles was a major boost in traffic and feeds and all that.

27:07He joins and somebody else is on the audio for this Telegram chat and says, this girl is 12 years old. And she says, nah, baby, I'm 21. And that was the extent of the KYC there. I did not ask Jarrett to show me evidence of underage girls streaming on the site. And Jarrett Stoyer told me they didn't want to see it either. I did see sexual photos of adults, though, on the site. Let me read a tweet from you that the PumpFun Twitter account wrote on June 13, 2024. We at PumpFun are fully committed to a family-friendly user experience. Trading memes should be a fun experience for the whole family. That is why we resolutely condemn the porn meta that has taken over our site But we can only accomplish that with your help Please send all the porn you find to our intern And it has the intern's email address And see, that's what I mean about PumpFun You can't tell if what you're looking at is a joke or real But as I spent time on the site myself I can tell you it's definitely not family-friendly I saw way too many buttholes while I was there for sure And the site has a strong resemblance of 4chan which is known for being the underbelly of the internet where the scummiest of content is posted and shared.

28:14But heck, even 4chan has rules. And I sat in on the very first Twitter spaces that PumpFun held. 10 ,000 people joined it. And the craziest question got asked. This question actually contains a square word. So if you don't want to hear square words, skip ahead two minutes. One last thing. I seen you guys getting a lot of fun about this. And I was very curious about it because I was trying to defend y 'all. Guidelines. What do you guys think about guidelines? Because I've seen a lot of people doing crazy stuff on PumpFun, me included. Would you guys add any guidelines or safety precautions on your website to fight that?

28:50Okay, so first of all, I think our ethos is we're super pro-free speech. We want as much content as possible on our platform to go across. However, if there's anything illegal or outright illegal based on the platform, we have to take it down. We can't have that burning both as a moral obligation and a business obligation. We don't want to be distributing anything like that or have anything on the platform. So yeah, that's sort of the way we stand. Have you gotten anything illegal yet? Actually, no. Surprisingly, we've sort of had this moderation team and stuff like that. And surprisingly, there hasn't been anything too shocking.

29:31But obviously, we have to be prepared for the worst case scenario. I'm sorry, I just have one last thing to say and then I'll get out of here. for you saying the illegal stuff and basically moderating what happens on Pump Fun I had an idea since I guess I'm talking to Pump Fun right now can you guys tell me if this is illegal or not it's an idea for Pump Fun I was thinking about I was thinking about fucking a girl live on Pump Fun tonight because my birthday is tomorrow so I thought it would be super exciting and crazy and different but is that illegal or not I'm genuinely asking it's something that I'm very serious about the girl is coming over is that illegal is this something that i can put on pump fun fucking a girl live um okay so very serious question very very serious question i mean okay let's let's put it this way like we are very free speech speech oriented um obviously sort of sexual content does exist um on the web um so yeah i hope you sort of take the answer as we sort of um say it basically so yeah I love you guys so much.

30:33Thank you so much for having me up here. Sapuji and Alon, I love y 'all. Oh, somebody sent me an interesting link earlier. It was somebody smoking meth on one of these live streams for money. It's actually a tweet here. They're smoking meth on what has happened to pump on. A news site called Decrypt pointed out that pump fun has seen some pretty gnarly stuff. A young teenager got his mom to bounce her boobs on camera to pump a coin. And when he got it to pump, he sold his whole stake in it. And then there was another guy who went live after creating the truth or dare token. and someone dared him to cover himself in isopropyl alcohol and then shoot fireworks at himself.

31:06And so he did it. The guy set himself on fire and burned pretty bad. He was rushed to the Miami hospital where he suffered third-degree burns on a large portion of his body. People do some pretty wild stuff on Pump Fun. We're going to take a quick ad break here, but stay with us because Jared's going to top all those stories and do something even more wild. This episode is sponsored by SpyCloud. With ransomware affecting 85 % of organizations in the past year and phishing becoming the top entry point to ransomware, taking action on your company's exposure has never been more critical. I recently visited spycloud.com to check my darknet exposure and was shocked to discover just how much stolen identity data criminals have at their disposal.

31:50SpyCloud's new identity threat report reveals that nearly half of all corporate users have been infected by infostealer malware at some point. With 63.8 billion distinct identity records now circulating on the dark web, the scale of this threat is staggering. What's even more alarming is that only 38 % of organizations can actually detect these historical identity exposures that create ongoing risk. Knowing what's putting you and your organization at risk, from stolen credentials to session cookies to PII, is critical for protecting against identity-based threats like account takeover, session hijacking, and yes, even ransomware.

32:26With SpyCloud, you're never in the dark about your company's exposure from third-party breaches, successful fishes, or infostealer infections. Read the full report and check your Darknet exposure for free at spycloud.com slash darknetdiaries. That's spycloud.com slash darknetdiaries.

32:51so he's starting to have qualms with the ethics of this project and is questioning if this is even something he should be working on then on top of that he started to get upset with the team and decided to move out of the communal living space and get his own apartment aside from all these long long-standing uh concerns um i'm really bad with money i was making good money but the thing is like i just spent it all on just uh because i am bad with money and i do party the point is um not anymore i'm 21 days sober today like i'm trying my best not to be that person and so thank you i'd rather i'd rather um survive this oral ordeal and not not drink myself to death but um for a while there i was i was going off the rails and so i had the money and i got this apartment i got in this apartment i didn't like it very much literally i know it's kind of like standard especially for central london to have money in roaches and shipped um However, I was very unpleased.

33:41I wanted a different room immediately. I asked for them to square up to the day of that month that I had worked, which then was halfway through the month. So I could get some money to find a better apartment. They said no. I said, can you... Why? They said, it will look like preferential treatment at this point. We have three other people working now. Mind you, the CEO did mention, I promised rather that I was going to get weekly pays, which would have helped me out a lot. I would not have been in this situation. However, it was monthly, eventually. And what happened is, I said, well, can you pay all bonuses?

34:08And he says, no. Bonuses to everyone. with his professional stuff. And so, with a head full of alcohol and the lack of ADHD meds and the depression from the loss of his mother and being in an apartment with mice and rats in a town he's totally unfamiliar with and working for this mega profitable crypto startup, which wasn't aligning with his ethics and morals, everything swirled together into focus for Jarrett. Did you know what you were about to do? Like, were you aware of your actions at all? Psychiatric report confirms that I was aware of what I was doing, but totally unaware of the illegality of my actions.

34:43I had no idea any of this fallout would happen. I had no idea that police would care. I didn't think this throughout. I really didn't. So unfortunately, I am where I am. I got to deal with the repercussions of my actions. I got to learn there are consequences to my actions, so I'm just resigned to it. So where does this begin? Do you see the vulnerability in the code and then just decide to exploit it as soon as you find it? Yeah, and funny enough, I did report it a couple of weeks before that. There was just no action to fix it. Well, you're the developer. I know, but I reported it. I tried to tell the CTO.

35:16You email yourself like, hey, you should fix this. Eh, I'm busy. You're not true enough. No, I mean, true enough. This hack is probably one of the more complex hacks I've ever talked about. I didn't understand it when Jared explained it. I didn't understand it when I read an article explaining it. I didn't understand it when I asked my DGEN friends to explain it. It took a long time of me reading article after article, trying to fully grasp what happened. And I'll summarize it just for the geeks out there who like the technical aspects like me. When a token is made on PumpFun, it pretty much is just available on PumpFun.

35:46But when enough people buy it, it then gets graduated to Radium, which is a DEX, a decentralized exchange. And this makes it a little bit more official because it's on this decentralized exchange now. And so to graduate out of PumpFun into the DEX, PumpFun sends a bunch of Solana along with it in order to fund the liquidity pool on the DEX. So what Jared did is he took out a flash loan and bought all the tokens needed to graduate the meme coin over to the DEX, and then he immediately sold the meme coin to pay back the flash loan. Then, using his insider access, he redirected where the Solana was supposed to go.

36:22Instead of it going to the DEX, it went to somewhere that he controlled. This would allow him to take anywhere from 1 to 80 Solana coins every time he could get a coin to graduate out of PumpFun and onto the Radium DEX. But Jarrett, being Jarrett, wrote a little program to try to do it to not just one or 10 or 20, but thousands, tens of thousands of pump fun meme coins. Because every time he could get one of them moved over to the DEX, he'd make a few thousand dollars. So he wrote this program and executed it, taking out thousands of flash loans, pumping projects and redirecting the Solana that was supposed to go to the DEX to somewhere else he controlled.

37:00Then he immediately sold the meme coins to pay the loan back. On May 16th, 2024, he decided he was going to execute this program. It was all built and ready, and once triggered, it would just automatically try to hit as many meme coins as possible on PumpFun. I was not thinking straight at all. I was just that out of it that I didn't understand what was going on. I didn't even know what I was writing while I was writing it. It's very interesting. Any idea why you were so out of it? What do you mean by out of it? Probably without antipsychotic medication for about six months would do it. I'm a diagnosed schizoaffective person with a panic disorder, bipolar, and antisocial personality disorder.

37:41And depending on how you talk to ADHD, the New Psych Report. The New Psych Report believes me to have one diagnosis. He doesn't think there's antipsychotic symptoms nor are there so long, so long when it's over. However, he thinks just ADHD and maybe make it to a personality disorder, but he didn't want to actually declare it. Just needs more assessment. Gosh, dang. Dang, dude. No wonder you're called Stack Overflow. It's a memory leak, isn't it? That's the vibe. My Instagram, and my no-law on Instagram, is 256 bits of confusion. Yes. That was a lot. You just told me a whole bunch of diagnostics, just rattled one after another.

38:17Yeah, yeah, yeah. Well, the first one was more than 15 years ago, wasn't it, that I got diagnosed? The last three years of my life, I've spent more than two years in hospital or more long-term hospital grounds, I guess, like residences or programs. I read through Jarrett's psychiatric report. It was conducted on him to see if he knew what he was doing at the time of this hack. The report is kind of dark. The dude was addicted to cocaine his whole life, but he had been off it for the last three years. He's been hospitalized for mental issues six times in the last three years. One was just to go through the excruciating detox from cocaine.

38:58And in the report, he admitted to attempt suicide a few times by taking too many meds. He often has these extreme cases of paranoia where even the smallest things can trigger it. Like he gets hallucinations sometimes. Little everyday manageable events become not so manageable or like even self-care, all that stuff. It's a slippery slope and insanity, really. The psychological report says that the day he did the hack, he was aware enough to know what he was doing, but not aware of the legality of what he was doing. It's kind of like the spotlight of consciousness was only focused on the here and now, and no light was shed on the possible future or the consequences.

39:37You see this vulnerability, you have this episode, a psychotic episode, and you're just like, oh my gosh, let's see if this can work. I don't really care. Like, I mean, do you have kind of a... I'm thinking about that moment right before pushing enter. Well, yeah, that's the thing. The moment right before pushing enter, and I'm glad you phrased it like that, because it was quite the... Leading up to it, I got paranoid again. I couldn't be in the same building as them. I thought they would lash out and stuff. And I did like, certidatiously move to a cafe close by and stuff. And I had to sneak around and look around the corners they couldn't see me and stuff.

40:15But then at the very moment, I was hovering over the enter key, right? I stepped back and I said, well, let's just think about it for a second. Let's draft a tweet here. And so it was actually a Facebook post. Yeah, I'm going to show you. It got 2.1 million views. This is the tweet. It basically summarizes my thoughts at that very moment. Now, magic. Everybody be cool. This is a robbery. What'd it do? Stack attack? I'm about to change the course of history and then rot in jail. Am I insane? Nah. Am I well? Very much not. Do I want anything? My mom raised from the dead. And barring that, life without parole.

40:55Okay, so you string a series of tweets. And yeah, 2.2 million views, this thing. Yeah. So you knew this was going to steal money. Who do you think it was going to steal money from? The users. That's the thing. I limited the damages enough that they could pay to the users. That's not a big deal. Now, did you have any estimate on how much money you would be stealing? $40 million. $40 million. No, it says in the tweet about$80 million, but I was just being silly. If done right, this heist is going to steal$40 million worth of Solana from the users of PumpFun. In his tweet, he even goes so far as to say it might cause a Solana outage, suggesting that this hack could be so catastrophic to Solana that it causes a chain split, similar to what happened to Ethereum Classic.

41:42I don't know why I said the Solana fork thing. People laugh about it constantly these days. They quote this thing still and say, and not even thinking you're going to cause the fourth of Solana. It's just very interesting that people think I'm bad. I mean, I was. I was always not well on Aeropuze. Okay. So you write the tweet and then hit enter. Yeah. I'm going to start getting phone calls on Telegram over and over again. So I uninstall Telegram. How was that? I went and walked around in circles. And I was running out of battery. One of the employees comes running by me. And like, I even just put up my hands in a beach sign, but he like ran right by me and looked both ways down the road and ran off in a different direction.

42:24I said, well, that's my that's my hints that I should I should get some cover. God protected me in that instance. So let's go get some cover. His program was working flawlessly. He was taking out flash loans, pumping projects until it flip over to the decks and then sell those coins to pay back the flash loan and then redirect in the salon that was supposed to go to the decks. But here's the thing. His program had one other trick up its sleeve. His mission wasn't to make money. He wanted to be dramatic and theatrical, remember? So his hack was programmed to send the coins he was getting to random Solana projects that he liked.

43:00In fact, he never had possession of the stolen Solana at any time. They were automatically redirected to random people in the world, and he had thousands of wallets that he was sending this money to. There's about 95 total? thousand addresses? 95 ,000 total addresses that could have potentially received funds. Out of those, only about 2 ,000 did again because I'm not good at math and it was supposed to actually hit everybody more than once. Regardless, yeah, just random jokes. I actually, I asked somebody at some point, I said, who do you believe to be a more deserving subset of users on a salon?

43:32And this is what I came along. Hundreds of Pump Fund coins were getting hit by this and as the script continued running, thousands were getting hit. The owners of Pump Fund quickly became aware that their site was under attack and were looking for Jarrett. But at that point, someone gave Jarrett some money and he checked into a hotel room not even a block away from the offices to try to lay low for a while. And I'm just trying to catch your emotional reaction when you're seeing it actually working. I'm like, shit, it worked. I didn't anticipate... Yeah, I mean, there's that. The first one when it went through, I was like, oh, shit, it didn't work.

44:06Yeah, then it's obviously multiplying, like doing these on a... You got an acycron of sleep and stuff, so there's many thousands or a couple of minutes or whatever or at least attempts because there's again many hundreds of thousands in total that failed. However, I guess I was more worried about getting the thing to have more successful transactions in the mind when emotional response. Again, somebody who's diagnosed presently with ASPD and potentially mixed personalities or I don't really understand emotion the way that most people do. It's more technical and it's more like I don't process emotions in the same way I guess is what I should say.

44:40Yeah, how does that work? It's like I'm on the moon and I have a telescope, and I can kind of witness what other people go through by viewing them through the telescope, and I can emulate as best as I can, and I come off pretty well, but I really have no idea what I'm doing. It's just through emulation at a very long distance. PumpFun creators couldn't stop it. They wanted to, but simply had no tools to combat this, and they just sat there, staring at the devastation unfolding. Thousands of Solana tokens were being taken and redistributed to random Solana projects. Eventually, the PumpFun team came up with a plan.

45:14They increased the transaction fees that were being charged on the site. This way, every time Jarrett bought some PumpFun tokens, he'd be charged a ridiculous amount. And the increase in fees actually did put an end to this because the flash loans that Jarrett was taking out simply couldn't cover the extra fees required to pump the token anymore. And even if it did, it would likely make this plan be a lot less profitable. So somewhere between 30 to 60 minutes in, the elaborate and wild robbery of PumpFun came to an end. Jarrett was able to pilfer 12 ,600 Solana coins at the time and send them all to random addresses, other projects that he thought were deserving of the money.

45:50He didn't keep a single token for himself. In total, it was about 2 million US dollars worth of Solana. So the victims here were the people who were using these meme coins on PumpFun. They had their liquidity stolen. Pump Fund had to take responsibility for this and spend their own money putting back the liquidity into these projects that got it stolen from. So in the end, the biggest loser here is actually Pump Fund. And they were mad. They learned pretty early on that Jarrett must have been behind this. His sudden disappearance, strange behavior, and wild tweets were clues alone. But tracing this through, they also could see that it was an insider who was redirecting the funds.

46:28So they called the police to help them hunt down and arrest Jarrett.

46:36Two days later, they found me. A few days later, actually, they found me. Again, 90 meters from the office. They sent somebody to my sister's house in Canada in that time. And there was a private, what was it called? The International Security Service was hired to find me, which is why they found me, I guess. But I was just eating a burger across the street. And they saw me and reported me. And then to a warning, the cop showed that. Somewhere in the middle of it all, he discovered that his wallet was receiving huge amounts of meme coins, and he couldn't quite understand why. By the time this was all over, he had about$600 ,000 in Mean Coins in his wallet.

47:12But he just handed the private key of that wallet over to the PumpFun team because he wasn't trying to make money off this himself and felt like he already made the statement he was trying to make. Two or three in the morning, I was asleep. I was fast asleep. The cops show up and they knock on the door and I said, ah, shit, you're going knock on. Not even this person I've ever been arrested. And they come in, these gentlemen, and it was cordial and stuff. I eventually went to go pick up a glass bottle full of water to pour myself water. I didn't know I was under arrest at this point. And they said, can you put the bottle down?

47:39I just want some water. He says, I'll get you some water. I was like, sure. Thank you. Anyway, they're terrifying. I've learned since that the reporter for the alleging party said that I would tend to violence very quickly, which is not true. Categorically, it's historical, all of that stuff. And they were worried I would destroy the evidence needed upon the police arrival. Body chems will prove otherwise. It was very important. Then I went to the station, stayed overnight, based on in the morning, thought to a psychiatrist, three psychiatrists, actually. They said, I probably shouldn't answer questions.

48:11I mean, I've been a bit concerned about myself. Listen, I haven't had medication. I have not had medication in six months. I don't think I can answer questions right now. So that's what happened. Then I was in the hospital for a month. I came out. I was late on my rent. Paid my rent. Dale says, I'll be here. Been here since. Got drunk for, I think, two months straight, pretty well. And then decided one Monday to stop drinking. Started doing recovery groups. and have been sober since. The court looked at his case and decided that he'll receive a maximum of 14 years in prison for this and a minimum of seven.

48:43How do you feel about that? I don't know. Ambivalent. No, I have no idea. I'm not really phased. I've been through worse. It's just unfortunate. I'm glad mom's not allowed to see this. I really have my reservations about my nieces knowing that I'm in jail. That will suck for them. But the point is, yeah, I'm not I see no issue with it it's a good jail I mean no jail is good jail but it's decay I mean it's not it's not like dirt floor you can get a degree there's like libraries I'll be fine you can buy vapes at the canteen you'll be fine you'll be fine I'll be fine I'll be fine I'll be fine the funny thing is I begged for it in the tweet you just saw the tweet I begged for it at that point anything was better than living with the roaches and mice here in this barn up soon at that point I really just didn't one day where I was living I didn't want to deal with the things anymore.

49:32And I thought to myself, jail is preferable to do this. And so I did the stupid thing. And now I got to face the music. You really are a character out of like Sarchar, Camus, or Kafka or something. Mice and rats made me, drove me crazy to the point where I committed a crime to go to jail for seven years. But at the same time, I wanted to spread the wealth to everyone else who deserved it. This is ridiculous. This is what it is. This is all fact. I mean, you're welcome to do your research and cross-reference, but this is the series of events that exactly would happen. I don't even know what's a thing about this.

50:11How do you want this story to end? You're going to go to jail, and you're going to be watching the news, and what news are you hoping to see? I know invariably that they're going to run off with the money at some point, all of the user funds, which is much more than trying to avoid. Hold on. It's kind of ironic that you said that, because when you go to the site, Pumped Up Fund, a pop-up shows up and it says, pump prevents rugs by making sure all created tokens are safe. They say they're the ones preventing rugs, but you're saying, no, they are going to rug pull. I believe so. I have firm beliefs, yeah.

50:46It's that last part that really makes me wonder where it says all created tokens are safe. What are you talking about? Should I be concerned they aren't safe? Like if I go to my bank's website, it doesn't say, we promise your money's safe here. Yeah, it's a class act anyway. But I firmly believe that that's the end goal for them. Whether or not they go to a centralized version themselves. They pitch themselves as the next FTX. It's a really long story, but I guess in a nutshell, I really wish that I could have some effect where I limit the damages this time around. But I guess I might be able to.

51:20Well, it is kind of ironic that Jarrett thought the site was going to rug everyone else, but he rugged them first. Like, really, he's the one who took money from the users, you know? It was only the site that had to reimburse everyone. I guess that's the key there. So when I came over, I didn't anticipate that they were planning this heist to be exactly what it is. And now I'm firmly convinced that it will be what everybody doesn't expect, apparently. And so, yeah, they believe that money to be theirs. I have no idea how much they have in TVL. It was$80 million on May 16th or whatever. It's exponentially more now, probably.

51:56And so it will be mayhem and carnage. I don't hope for that. I just know that'll happen. Yeah. So Jared thinks the owners of the site are going to rug pull all the users of PumpFun, take all the money that's locked into the site, and close up. But it seems like the site's making a lot of money, so I'm not sure. Like, why butcher a cash cow, you know? But this was Jared's whole point, to try to warn everyone before it happens and to be dramatic and theatrical about it. I seem sold at the time that I was in the right and I still swear that I'm fine by my being in here even in that letter I'll just read this out loud I need to be honest I do not feel remorseful for the damages caused the Baton Corporation Limited of late they have been earning north of 1 million quid a day from the systemic exploitation of friends and family of people posting unregulated tokens to the site each and every day there is absolutely no damage to them but they have not recouped many times over I petition you your honor to consider the relative harm here While my actions may have caused temporary disruption, the ongoing practices of the Tonic Corporation Limited posed a far greater and more sustained threat to individuals and families who are unknowingly drawn into these exploitative schemes.

53:04So Jared pled guilty and even admitted guilt on Twitter, which got 2 million views. And it was all said that on October 25th, 2024, he was going to be sentenced. However, last minute, he changed his mind and he asked his lawyers to vacate his guilty plea. And they were like, seriously? And they quit. They didn't want to represent him anymore. So he told the court, he's changing his mind. He's not guilty, which now means there's a much bigger process ahead for this case. And it might take months to solve. So we'll see where Jared ends up in the next few months. Oh, and this episode was really hard to make because PumpFun is always changing.

53:40Just before I was about to publish this, there was a surge in new users at PumpFun. And along with that came a surge of new live streamers. And things got pretty wild. Some guy was holding a goldfish at gunpoint saying, buy my coin or I'll kill the fish. Another guy was live streaming himself pooping for four days. He was sitting on the toilet for four straight days trying to pump his coin. Another guy locked himself in a dog cage until his coin would hit a certain price. And someone else locked their grandma in a cage until the coin would hit a certain price. I saw the photo, but I'm pretty sure it was fake.

54:15Another guy was firing his gun out the window. every time the coin went up a certain amount. And I also heard reports of some live streaming bestiality. And there were reports of people threatening to shoot their pet dog unless their coin pumps. And I heard a report that there was someone live streaming threatening to shoot their family unless their coin got to a certain height. And someone live streamed themselves tying a rope around their neck, saying unless their coin hits a certain amount, they're going to hang themselves. And the coin didn't make it, so he hung himself. But then as the stream continued, some viewers were like, nah, I can see your hand moving.

54:49That's fake, bro. Anyway, all this sparked an outcry on Twitter, especially from the crypto community saying, whoa, PumpFun, you've got people killing themselves on camera. You need to make some rules, guys. You're going to ruin everything. On top of that, the PumpFun team themselves was actively taking down live streams that had repulsive or dangerous content. And it got to be too much. The PumpFun team simply couldn't keep up with the constant stream of awful content that they were trying to remove. So they turned off the live streaming feature altogether and issued a statement saying they simply can't moderate effectively with the current user base size.

55:25And they need to scale up their moderation abilities and make it clear what's allowed and what's not allowed before allowing live streaming back on. All I can say is I think this is just PumpFun's origin story. I don't know what's going to happen next, but it almost feels like one of those Internet moments that I'm tuned into now. and I'm going to have a box of popcorn ready for whatever happens next. Aside from that, it was a pleasure, Jack. And if you do get around to publishing this, I just want to say that I recommend everybody get some more fun and more time to touch your guys. That's about it.

55:58Thank you. Seriously. All right, I'll take advice from you. Thank you. I can't trust a bunch. You put it.

56:16This episode was created by me, the cyber klutz, Jack Recyder. Our editor is Control-Alt-Defeat, a.k.a. Tristan Ledger. Mixing by Proximity Sound, our intro music is by the mysterious Breakmaster Cylinder. Why was the computer tired when it got home? Because it had a hard drive. This is Darknet Diaries.

56:42Thank you.

From the publisher

Jarett Dunn, AKA StaccOverflow, stole millions of dollars from a website called Pump Fun, and he wanted to do it in the most dramatic and theatrical way he could. His big heist is known as the “Stacc Attack”.

https://x.com/STACCoverflow

He has a merch store now freestacc.io.

Sponsors

Support for this show comes from Cobalt Strike. Cobalt Strike simulates real-world, advanced cyber attacks to enable red teams to proactively evaluate an organisation’s security readiness and defence response. Their Command and Control framework gives red teamers the ability to customise their engagements and incorporate their own tools and techniques, allowing you to stress-test specific parts of your incident response capabilities. Learn more about Cobalt Strike and get a custom demo at https://cobaltstrike.com/darknet.

Support for this show comes from Axonius. The Axonius solution correlates asset data from your existing IT and security solutions to provide an always up-to-date inventory of all devices, users, cloud instances, and SaaS apps, so you can easily identify coverage gaps and automate response actions. Axonius gives IT and security teams the confidence to control complexity by mitigating threats, navigating risk, decreasing incidents, and informing business-level strategy — all while eliminating manual, repetitive tasks. Visit axonius.com/darknet to learn more and try it free.

Support for this show comes from ThreatLocker®. ThreatLocker® is a Zero Trust Endpoint Protection Platform that strengthens your infrastructure from the ground up. With ThreatLocker® Allowlisting and Ringfencing™, you gain a more secure approach to blocking exploits of known and unknown vulnerabilities. ThreatLocker® provides Zero Trust control at the kernel level that enables you to allow everything you need and block everything else, including ransomware! Learn more at www.threatlocker.com.



More from Darknet Diaries

All 50 episodes
152: Stacc AttackDarknet Diaries · 53 min
Listen in VO