Banana Gun Team Disables Telegram Bot After Mysterious Withdrawals Are Reported

An update from the Banana Gun (BANANA) team stated that its back-end was uncompromised, despite reports of unauthorized transactions from user wallets flooding crypto social media.

Banana Gun (BANANA) has disabled its Telegram bot following reports of unauthorized transactions from user wallets.

The team announced the measure in a statement on Monday, adding that its back-end was uncompromised.

"We have confirmed that our back-end is not exploited," the statement reads.

However, the team suggested that a front-end vulnerability may be the root cause.

"We are leaning towards a vulnerability in the front-end," the statement adds.

While scant details were disclosed, the team’s statement implied that the exploit may have originated from Telegram.

Although unconfirmed, it’s possible that the ten or so affected users interacted with malicious links.

Phishing scammers have launched a deluge of harmful campaigns this year, attempting to steal cryptocurrencies and digital assets from web3 participants.

The team encouraged the public to reach out with helpful information or to report further cases.

"If you have any insights that may help us, feel free to send us a direct message here on Twitter," the statement concludes.

Banana Gun’s tool has generated over $35 million in all-time fees, according to DefiLlama.

Thousands of users reportedly employ the Telegram trading bot to quickly execute swaps.

If Telegram emerges as the issue’s origin, Banana Gun would be the second decentralized finance protocol to suffer a web2-based exploit this week.

On Sept. 18, hackers gained access to the website of Ethena Labs, a synthetic dollar issuer.

Similar to the Telegram bot, Ethena paused its website until the issue was resolved.

"We've worked with the registrar to regain control of our domain and had the phishing domains blocked across various services to protect our users," a statement from Ethena reads.

"To reiterate, the protocol is not affected and funds are secure. ethena[.]fi remains the only official domain and we will… https://t.co/x7twAcUNGr

The above is the detailed content of Banana Gun Team Disables Telegram Bot After Mysterious Withdrawals Are Reported. For more information, please follow other related articles on the PHP Chinese website!