Bonk.fun warned users not to use its site after attackers hijacked the domain and pushed a fake wallet-draining prompt.