The SlowMist security team revealed that the popular open source project "solana-pumpfun-bot" on GitHub contains a coin theft trap. After the victim ran the project, the wallet assets were stolen, and the funds in the relevant address have flowed into FixedFloat.