According to Odaily, pump.fun has acknowledged an attack on its contract and is currently investigating the matter. The contract has been upgraded, preventing any further theft of funds by the attacker. The total value locked (TVL) in the protocol is secure.
Trading has been temporarily halted, making it impossible to buy or sell any tokens at the moment. Any tokens currently being migrated to Raydium cannot be traded and will not be migrated for some time. Any tokens that have been successfully transferred from the pump.fun contract and have liquidity locked on Raydium are safe.
If users have ever connected their wallets to pump.fun, their wallets are secure. Pump.fun is collaborating with relevant parties, including law enforcement, to minimize losses.