Banana Gun releases "Stolen" update: 11 users lost 3 million dollars, will be fully compensated

ChainCatcher message, Telegram Bot project Banana Gun released an update on the "theft" situation, stating that its EVM and Solana bots are back online, with no other restrictions apart from a 2-hour transfer delay.

A total of 11 users were affected, with a loss amounting to 3 million dollars. All affected users will be fully compensated by the Banana Gun treasury, and compensation will not be made through token sales. After a thorough investigation by the Banana Gun development team and external experts, it was found that the Telegram message oracle used by Banana Gun had a potential vulnerability, which may have led to this attack.

After addressing this issue, Banana Gun implemented enhanced security measures and reactivated the bots. This root cause analysis is supported by the following two points:

• The nature of the attack (manual transfers);
• Victims received transfer notifications within the bot.