Jarett Dunn, a former contractor known online as @STACCoverflow, was arrested by British authorities in the early hours of May 18 in London, following a meticulous 26-hour intelligence operation. Sources familiar with the operation revealed that a third-party stakeholder, who had hired a private intelligence firm, initiated the operation to track Dunn's whereabouts through social media posts and other publicly available information.

Local operatives deployed in a massive search led authorities to the Middle Eight Hotel in Covent Garden, where Dunn was found in a room and taken into custody seven hours later. Interestingly, his arrest coincided with his last social media post on X, where he hinted at his identity with the username @STACCoverflow, a play on the French phrase "j’arrête" (meaning "I’m done") and his real name, Jarett.

Following his arrest, Dunn was released on bail, according to his own post on X and confirmation from the intelligence firm.

The exploit targeted the pump.fun platform, which simplifies token launches on the Solana (SOL) network, resulting in a loss of over 12,300 SOL valued at approximately $2 million. The attacker utilized flash loans from Raydium, a Solana lending protocol, to manipulate the pump.fun bonding curves, a mechanism that sets token prices based on supply. By reaching 100% on these curves, the hacker accessed and withdrew liquidity meant for Raydium, then repaid the flash loan, making off with substantial profits.

Following the incident, pump.fun began collaborating with law enforcement to investigate the breach.

Igor Igamberdiev, head of research at cryptocurrency market maker Wintermute, was among the first to suggest that an internal private key leak might have facilitated the hack. Subsequently, Dunn, under the alias @STACCoverflow, admitted his role in the exploit through a series of erratic tweets where he expressed a desire to "change the course of history" and discussed his mental health struggles and grief over his mother’s death.

Dunn asserted that the stolen funds would be distributed to holders of various Solana tokens, suggesting a motive driven more by emotional distress than financial gain.