BONK.fun confirmed its domain was compromised and a wallet drainer deployed. Users warned to avoid the site until security is restored.