Attackers compromised the BONK.fun domain and deployed a wallet drainer, forcing the Solana meme coin launchpad to warn users to stop interacting with the site.