Banana Gun promised to refund 11 users affected by a $3 million exploit of wallets last week.

“All impacted users will be fully refunded from the Banana Gun treasury, with no tokens being sold for reimbursements,” the team posted on X late Tuesday.

Banana Gun operates one of the industry’s leading Telegram-based trading bots. It enables users to execute on-chain transactions and snipe upcoming token launches and has generated over $6.3 billion worth of trading volume from nearly 279,000 users.

Community members first highlighted the attack last Thursday, with Banana Gun confirming that some users had witnessed "unauthorized transfers" from their wallets. The incident prompted the team to switch off the Ethereum Virtual Machine and Solana bot, though it claimed its back-end systems were not compromised.

"Only a very small number of users (fewer than 10) were affected. Additionally, the transfers appear to have been executed manually. This leads us to believe the issue may stem from a front-end vulnerability," the project said at the time.

That number turned out to be 11 users, with the attack targeting “smart money” traders and crypto veterans who are “not easy to scam,” Banana Gun said on Tuesday, adding that the targets were known in the space due to their social presence or trading expertise.

“After a thorough investigation by the Banana Gun development team and outside experts, we identified a potential vulnerability in the Telegram message oracle we use, which may have led to the exploit,” the team stated.

The bots returned online after the issue was patched last Friday, and no attacks have occurred since the shutdown. Mitigations include a two-hour transfer delay, adding two-factor authentication for transfers and audits of the back-end and front-end systems.

Disclaimer: The Block is an independent media outlet that delivers news, research, and data. As of November 2023, Foresight Ventures is a majority investor of The Block. Foresight Ventures invests in other companies in the crypto space. Crypto exchange Bitget is an anchor LP for Foresight Ventures. The Block continues to operate independently to deliver objective, impactful, and timely information about the crypto industry. Here are our current financial disclosures.

© 2024 The Block. All Rights Reserved. This article is provided for informational purposes only. It is not offered or intended to be used as legal, tax, investment, financial, or other advice.

免责声明：本文章仅代表作者个人观点，不代表本平台的立场和观点。本文章仅供信息分享，不构成对任何人的任何投资建议。用户与作者之间的任何争议，与本平台无关。如网页中刊载的文章或图片涉及侵权，请提供相关的权利证明和身份证明发送邮件到support@aicoin.com，本平台相关工作人员将会进行核查。