Penpie

United

Banana

Banana Gun

BlackRock

Users of the Telegram-based cryptocurrency trading bot Banana Gun have been drained of nearly $2 million worth of digital assets.
Banana Gun enables Telegram users to trade on some of the most popular blockchains, such as Ethereum, Solana and Base.
However, at least 11 attackers have drained a collective $1.9 million worth of crypto from the bot’s users, according to onchain security firm Cyvers’ senior Security Operation Center lead, Hakan Unal.
Unal told Cointelegraph:
<blockquote>
 “It appears that BananaGunBot wallets are being drained. Our system has detected around 11 attackers (potentially more), and approximately $1.9 million has been stolen. Hundreds of users have already been affected."
</blockquote>
Cyvers shared the 11 attacker addresses exclusively with Cointelegraph:
<figure>
 <img alt="Telegram bot Banana Gun’s users drained of over $1.9M" name="" src="https://s3.cointelegraph.com/uploads/2024-09/01920a65-1133-7af3-a7b8-c0bed4050f5c">
 <figcaption style="text-align: center;">
 Banana Gun bot, 11 attacker addresses. Source: Cyvers
 </figcaption>
</figure>
The attackers have drained the wallets of at least 36 victims, according to pseudonymous crypto sleuth Yannick Crypto, who wrote in a Sept. 19 X post:
<figure>
 <img alt="Telegram bot Banana Gun’s users drained of over $1.9M" name="" src="https://s3.cointelegraph.com/uploads/2024-09/01920a56-1ccb-7d65-ab01-5931c8366789">
 <figcaption style="text-align: center;">
 Banana Gun Bot hack. Source: <a data-ct-non-breakable="null" href="https://x.com/YannickCrypto/status/1836709494602022942" rel="null" target="null" text="null" title="https://x.com/YannickCrypto/status/1836709494602022942">Yannick Crypto</a>
 </figcaption>
</figure>
The incident occurred two months after a hacker <a data-ct-non-breakable="null" href="https://cointelegraph.com/news/indian-crypto-exchange-wazirx-hack-235m" rel="null" target="null" text="null" title="null">stole over $230 million from WazirX</a>, an Indian cryptocurrency exchange, in the second-largest cryptocurrency hack of 2024 so far.
Related: <a data-ct-non-breakable="null" href="https://cointelegraph.com/news/btc-rallies-blackrock-bitcoin-white-paper" rel="null" target="null" text="null" title="null">BTC rallies past $62.6K after BlackRock issues Bitcoin white paper</a>
<h2 id="is-the-banana-gun-bot-hack-over">Is the Banana Gun Bot hack over?</h2>
Despite the lack of information, the attack doesn’t point to a wider smart contract vulnerability, according to Hakan Unal, senior blockchain scientist at Cyvers, who told Cointelegraph:
<blockquote>
 “Per our investigation so far, it doesn't seem like a contract exploit. It might be small amounts that are being drained from their users.”
</blockquote>
The number of victims suggests that the hacker didn’t successfully infiltrate the entire trading bot, only an isolated number of accounts, according to the pseudonymous crypto sleuth, who added:&nbsp;
<blockquote>
 “There were less than 40 victims out of 10,000+ with probably $100 million AUM, also the transaction heuristic doesn’t tell a hack on their site.”
</blockquote>
The hack occurred nearly two weeks after the notorious crypto drainer toolkit Angel Drainer came back online, with a new and improved version that has already deployed hundreds of malicious apps.
It is unclear whether the Banana Gun Bot incident was related to Angel Drainer.
Related: <a data-ct-non-breakable="null" href="https://cointelegraph.com/news/ethereum-lower-fees-vitalik-buterin-token-2049" rel="null" target="null" text="null" title="null">Vitalik Buterin sings at Token2049, highlights low L2 fees as ETH milestone</a>
<h2 id="are-bitcoin-etfs-the-next-major-targets-for-hackers">Are Bitcoin ETFs the next major targets for hackers?</h2>
North Korean hackers, including the infamous Lazarus Group, may begin targeting larger objectives, including United States-based Bitcoin (<a data-ct-non-breakable="null" href="https://cointelegraph.com/bitcoin-price" rel="null" target="null" text="null" title="null">BTC</a>) exchange-traded funds (ETFs).
Hackers could start shifting their attention to the US Bitcoin ETFs due to the sizable potential bounty, according to Michael Pearl, vice president of GTM strategy at onchain security company Cyvers, who told Cointelegraph:
<blockquote>
 “Only recently the FBI has issued a warning that North Korean hackers are going to try to infiltrate and steal money from ETFs. So, all those ETFs […] are storing the base Bitcoin somewhere. And you can be certain that somebody is already planning and thinking of how they're going to steal it.”
</blockquote><iframe width="100%" height="315" src="https://www.youtube.com/embed/0lKjfiV67fc" frameborder="0" allow="accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture" allowfullscreen></iframe>
Cyvers’ Michael Pearl, interview with Cointelegraph’s Zoltan Vardai, clip 1. Source: Cointelegraph
 Magazine: <a data-ct-non-breakable="null" href="https://cointelegraph.com/magazine/pythia-finance-drained-53k-crypto-sec/" rel="null" target="null" text="null" title="null">2 auditors miss $27M Penpie flaw, Pythia’s ‘claim rewards’ bug: Crypto-Sec</a>

Telegram bot Banana Gun’s users drained of over $1.9M

Table of Contents

Cointelegraph

Other articles published on Sep 19, 2024

DeFi Platform Rari Capital Is SEC's Latest Purge With Alleged Violations

Dominasi Bitcoin Capai Puncak 3 Tahun, Harga Sentuh US$62.000

Massive $500 Million Bitcoin Exit Leaves Top Exchanges Stunned

Curve DAO Price Prediction 2025, 2026 – 2030: Will CRV Price Jump To $2?

FET price rises as CEX inflows rise ahead of Cudos merger vote

Binance Launches Futures Trading for FIDA Today

Join our free newsletter for daily crypto updates!