Bitget App
Trade smarter
Buy cryptoMarketsTradeFuturesBotsEarnCopy
Banana Gun promises to refund $3 million stolen from impacted users

Banana Gun promises to refund $3 million stolen from impacted users

The BlockThe Block2024/09/24 16:00
By:The Block

Quick Take Banana Gun confirmed it will refund 11 users impacted by a $3 million exploit of the Telegram bot last week. The team said it had identified a potential vulnerability in the Telegram message oracle Banana Gun uses, which may have led to the exploit.

Banana Gun promised to refund 11 users affected by a $3 million exploit of wallets last week.

“All impacted users will be fully refunded from the Banana Gun treasury, with no tokens being sold for reimbursements,” the team posted on X late Tuesday.

Banana Gun operates one of the industry’s leading Telegram-based trading bots. It enables users to execute on-chain transactions and snipe upcoming token launches and has generated over $6.3 billion worth of trading volume from nearly 279,000 users.

Community members first highlighted the attack last Thursday, with Banana Gun confirming that some users had witnessed "unauthorized transfers" from their wallets. The incident prompted the team to switch off the Ethereum Virtual Machine and Solana bot, though it claimed its back-end systems were not compromised.

"Only a very small number of users (fewer than 10) were affected. Additionally, the transfers appear to have been executed manually. This leads us to believe the issue may stem from a front-end vulnerability," the project said at the time.

That number turned out to be 11 users, with the attack targeting “smart money” traders and crypto veterans who are “not easy to scam,” Banana Gun said on Tuesday, adding that the targets were known in the space due to their social presence or trading expertise.

“After a thorough investigation by the Banana Gun development team and outside experts, we identified a potential vulnerability in the Telegram message oracle we use, which may have led to the exploit,” the team stated.

The bots  returned online after the issue was patched last Friday, and no attacks have occurred since the shutdown. Mitigations include a two-hour transfer delay, adding two-factor authentication for transfers and audits of the back-end and front-end systems.


0

Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.

PoolX: Locked for new tokens.
APR up to 10%. Always on, always get airdrop.
Lock now!

You may also like

Genius Group Ordered to Sell Bitcoin Holdings

Genius Group must sell 10 BTC due to a court order, slashing its crypto treasury and market cap significantly.Unexpected Setback for Genius GroupMarket Cap Falls Below Bitcoin ReservesConcerns About Stability and Transparency

Coinomedia2025/04/04 14:11
Genius Group Ordered to Sell Bitcoin Holdings

Ethereum Price Sees 4 Straight Red Months

Ethereum has closed four red months in a row, but long-term holders remain hopeful for a rebound.Ethereum’s Tough Streak ContinuesHope on the Horizon for Ethereum Holders

Coinomedia2025/04/04 14:11
Ethereum Price Sees 4 Straight Red Months

Nexchain Emerges as April’s Best ICO: A New Era for Blockchain

Nexchain is committed to facilitating interoperability from one blockchain to the next through artificial intelligence, allowing for cross-chain communication and operational efficienciesConclusion

Coinomedia2025/04/04 14:11
Nexchain Emerges as April’s Best ICO: A New Era for Blockchain