BOT INCIDENT RECAP First of all, we’re humbled by the incredible bot activity on Banana Gun, even after last week’s incident. Thank you all for your patience and trust. We take this as a testament that we're handling the situation properly. As previously mentioned, our EVM and Solana bots are back online with no restrictions, except for a 2-hour transfer delay. A total of 11 users were affected, with $3M drained. All impacted users will be fully refunded from the Banana Gun treasury, with no tokens being sold for reimbursements. Details of the attack: - It targeted smart money traders and crypto veterans who navigate the space and are not easy to scam - All targets were "known" in the space, either due to their social presence or trading expertise - The victims witnessed the attacker manually transferring ETH from their wallets while they were interacting with the bot and receiving notifications - The attack affected both our EVM and Solana bots, which have separate codebases and operate independently - No attacks occurred after the bot was shut down Analysis of the situation: After a thorough investigation by the Banana Gun development team and outside experts, we identified a potential vulnerability in the Telegram message oracle we use, which may have led to the exploit. After patching this issue, we implemented enhanced security measures and have reactivated the bots. This root cause analysis is supported by 1) the nature of the attack (manual transfers rather than a scripted drain) and 2) the fact that victims received in-bot notifications of the transfers. Mitigation going forward by Banana Gun: ✅ Implemented 2 hour transfer delay ✅ Adding 2FA for transfers (to be done) ✅ Conducted a thorough review of both the back-end and front-end systems ✅ Redeployed the back-end and switched to new servers ✅ Collaborated for the investigation with Security Alliance, one of the leading security teams in web3 ✅ Pentesting & more audits for webapp and TG bots coming Lastly, we want to give a special thanks to all our partners who have supported us through these times, most notably Seal team (@_SEAL_Org), AML bot ( @AMLBotHQ) and Binance Security team.