Banana Gun Hack

What happened

On September 19, 2024, Banana Gun users reported unauthorized wallet transfers. The project's later update put the loss at about $3 million across 11 users and promised treasury-funded refunds.

Technical root cause

Banana Gun described a potential Telegram messaging-oracle vulnerability. The public recap does not establish a specific command-authentication or message-interception mechanism.

How it happened

1. Unauthorized transfers prompted Banana Gun to suspend its EVM and Solana bots.
2. Its later incident recap identified a Telegram messaging oracle as the most likely cause, without publishing the exact flaw.
3. The project said it patched the suspected issue and restarted the bots with a transfer delay. It also advised users to enable Telegram two-step verification.
4. Banana Gun promised full refunds without token sales; that commitment does not demonstrate recovery from the attacker.

Protocol details

Classification Protocol Logic / Other / Frontend & Infrastructure

Protocol Type Telegram Bot

Protocol links Website @BananaGunBot

Evidence

• report @BananaGunBot incident report x.com
• analysis DeFiLlama defillama.com
• analysis Banana Gun Announcements – Telegram t.me
• analysis Banana Gun promises to refund $3 million stolen from impacted users theblock.co

Understand the attack patterns

Compare incidents →

Oracle Manipulation & Price Manipulation