Just got drained for $26,669 from a new pumpfun exploit around email based signups. I was streaming GME when someone in my live chat told me to DM him on telegram and kept spamming saying he needed help with adding funds to his pumpfun account so he could buy the coin. After i messaged him he told me how he was new to trading meme coins and he liked the stream and wanted to toss in $7,000. I then tried to explain to him how to add more money via crypto but he said he was scared to add more money because he just heard about the site and wanted me to call him on discord to prove to him the site was legit. After i added him on discord he called me and i started explaining to him how the site was completely legit, he then asked me to ss and show him how to make an account with an email because he said he wanted to make a new email based account. Then while i was screensharing i made a pumpfun acc through one of my non personal emails, after i made it he asked me to add money to the wallet to prove it was safe. At this point i was starting to get weird vibes and i hesitated for a few minutes to add money to the wallet, but then he showed me that he had $1,300,000 in his wallet and said his mom recently passed away and he got all the life insurance money and really wanted to start trading because he didn't have a source of income. So then i added 300 SOL/$26,000 to that wallet because i wanted to show him that it was completely safe, after i did that he then told me to buy a coin, while i was clicking on the coin he said two words "Money gone" I was not even mad i was just so confused on how he did it. He never saw my private keys, never saw my recovery phrase, the only thing he saw was me making the account. Then the dude proceeded to tell me how he has made millions off of going this and tried to convince me to find him more targets for him and id get a 20% cut until i recovered what he took. All of this took place in the timespan of a hour as well, a few minutes later i joined a dc call with and we started brainstorming on how he managed to drain me, we then went though the same steps that i did and koop saw that when making a pumpfun account through email it flashes your auth key in the url for a split second. @Pumpfun and @a1lon9 this must be changed immediately, this one dude has stolen over $5,000,000 in attacks like this and if this same thing happened to me a year ago i probably would have killed myself. Thankfully with my current financial situation i can handle a loss like this but many people cant. Please RT and Like this post to spread awareness and stop this dude from taking more money from people. Full Thread below of solscan links, chat logs, images, and the small recording i have of the dudes voice after he drained me 👇