Pump.fun’s X account was compromised by hackers who promoted a fake governance token — raising questions about memecoin regulation and security.