2024

Uniswap

Banana Gun

Banana

Banana Gun’s team claimed no vulnerability on their side. After an exploit against individual wallets, the bot was frozen for investigation.&nbsp; 
Banana Gun bot has no vulnerabilities on its backend, the team announced after investigating the issue. The issue may be on the bot’s frontend, and some of the transfers may have a manual element. Only a small number of wallets were affected.&nbsp; 
<blockquote class="twitter-tweet" data-width="550" data-dnt="true"> 
 UPDATE ON BOT SITUATION 
 Today, some users of Banana Gun experienced unauthorized transfers from their wallets. Promptly after the first incident, we immediately switched off the bot and began diligently checking our back-end. 
 We have confirmed that our back-end is not… 
 — Banana Gun 🍌🔫 (@BananaGunBot) <a href="https://twitter.com/BananaGunBot/status/1836789190953963606?ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">September 19, 2024</a>
</blockquote> 
<script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
“We have confirmed that our back-end is not compromised. Both the router and database have been thoroughly inspected, and only a very small number of users (fewer than 10) were affected. Additionally, the transfers appear to have been executed manually,” announced the team on X.&nbsp; 
The Banana Gun bot will remain offline until the exact reason for the exploits is found. Since the bot is used through Telegram, some seek the vulnerability with the chat app. Telegram has been known to distribute malicious channels and fake token deals. Using the bot still requires action on the side of the user, after activating on Telegram.&nbsp; 
The exploit happened just as Banana Gun opened its registration for a <a href="https://register-bananagun.com/" rel="nofollow noopener" target="_blank">web-based</a><a href="https://register-bananagun.com/" rel="nofollow noopener" target="_blank"> version</a> and put out a teaser for an Appstore launch with no&nbsp; 
Immediately after the news, the BANANA token crashed from $43 to $40.34. The token may remain under pressure while the bot is offline. Banana Gun is the most active bot, with <a href="https://dune.com/queries/2683618/4462832" rel="nofollow noopener" target="_blank">lifetime accrued volume</a> of $6.7B in sniping meme tokens and DEX assets. 
All bot users with wallets linked to the bot are advised to stop all trading and sweep the assets into a new wallet. Banana Gun requires some liquidity to make the orders, and the funds are at a higher risk compared to being stored in other types of wallets.&nbsp; 
<h3 id="span-style-font-weight-400-536-eth-and-sol-taken-from-banana-gun-deposits-span">536 ETH and SOL taken from Banana Gun deposits</h3> 
The exact mechanism of transferring tokens through a bot-based order is still unknown. The last drained bot-connected accounts happened a few hours ago, with no new reports of losses while the bot was paused. There are hypotheses that the origin of transactions came from hacked Telegram accounts.&nbsp; 
Up to 536 ETH were drained from the selected wallets, and the exploit has not affected the wider user base. Banana Gun has 5,072 users daily on average, though it is one of the biggest producers of DEX traffic and transactions. The bot carries more than 272K accounts, opening a wider vulnerability of funds uploaded for sniping.&nbsp; 
The estimated value of losses is at $1.9M. The total losses also included Solana-based asses, expanding the hack to $2M. User yannickcrypto.eth found 36 compromised users, for a total of 536 ETH stolen, with some data on SOL also drained from bot accounts.&nbsp; 
After the exploit, one of the <a href="https://app.nansen.ai/profiler?address=0xe451241389b80a980c44dd55805eb05276cd141c&amp;name=0xe451241389b80a980c44dd55805eb05276cd141c&amp;chain=ethereum&amp;tab=overview" rel="nofollow noopener" target="_blank">recipient addresses</a> only retained 26 ETH, while the other <a href="https://app.nansen.ai/profiler?address=0xd073f28400be60aae6691d6131b5f7f45e91d999&amp;name=0xd073f28400be60aae6691d6131b5f7f45e91d999&amp;chain=ethereum&amp;tab=overview" rel="nofollow noopener" target="_blank">address</a> contains 62 ETH. The second address received funds from two other power users, draining their wallets for 30 and 32 ETH. The hacks affected heavy DEX users and there are rumors more accounts have been drained.&nbsp; 
<figure id="attachment_590093" aria-describedby="caption-attachment-590093" style="width: 100%" class="wp-caption alignnone">
 <img loading="lazy" decoding="async" class="wp-image-590093 size-large" src="https://www.cryptopolitan.com/wp-content/uploads/2024/09/WhalesNewSep192024-1200x112.png" alt="Two wallets were drained of a total of 62 ETH by the Banana Gun bot hacker." width="1200" height="112" srcset="https://www.cryptopolitan.com/wp-content/uploads/2024/09/WhalesNewSep192024-1200x112.png 1200w, https://www.cryptopolitan.com/wp-content/uploads/2024/09/WhalesNewSep192024-300x28.png 300w, https://www.cryptopolitan.com/wp-content/uploads/2024/09/WhalesNewSep192024-768x71.png 768w, https://www.cryptopolitan.com/wp-content/uploads/2024/09/WhalesNewSep192024.png 1398w" sizes="(max-width: 1200px) 100vw, 1200px">
 <figcaption id="caption-attachment-590093" class="wp-caption-text">
 One of the known addresses of the Banana Gun bot hacker drained two other whale wallets. | Source: <a href="https://app.nansen.ai/profiler?address=0xd073f28400be60aae6691d6131b5f7f45e91d999&amp;name=0xd073f28400be60aae6691d6131b5f7f45e91d999&amp;chain=ethereum&amp;tab=overview" rel="nofollow noopener" target="_blank">Nansen</a>
 </figcaption>
</figure> 
After the Banana Gun exploit, other social media traps emerged, claiming to have tools for coin recovery. Connecting wallets to those services may extend the damage.&nbsp; 
<h3 id="span-style-font-weight-400-banana-gun-stalled-during-neiro-token-craze-span">Banana Gun stalled during NEIRO token craze</h3> 
Just as Banana Gun was stopped, the bot’s volumes may also affect the NEIRO market craze. As of September 19, NEIRO had the biggest share of attempted snipes and trades.&nbsp; 
More than 43% of the Banana Gun <a href="https://dune.com/queries/3077789/5129699" rel="nofollow noopener" target="_blank">bot activity</a> was pointed at the NEIRO/WETH trading pair and 17% for another version of NEIRO/WETH. Other meme tokens sniped before the exploit included CATE, CATALORIAN and KABOSU. 
The bot supports up to 1,000 highly <a href="https://dune.com/queries/2686723/4467928" rel="nofollow noopener" target="_blank">active </a><a href="https://dune.com/queries/2686723/4467928" rel="nofollow noopener" target="_blank">pairs</a> on Uniswap and Raydium.&nbsp;&nbsp;&nbsp; 
The Banana Gun bot also needs sufficient balance for fees, as its most active networks are Ethereum and Solana. Some of the power traders have paid upward of $1M in fees. Solana bribes are the biggest drain on wallets, though this is necessary for guaranteed inclusion in the next block.&nbsp; 
&nbsp;– 
Cryptopolitan reporting by Hristina Vasileva.&nbsp;

Banana Gun claims no vulnerability on their backend after user wallets drained

Table of Contents

Cryptopolitan_News

Other articles published on Sep 19, 2024

Spot Bitcoin ETFs see $52.7m outflows led by ARK 21Shares

Today’s Crypto Recap: Fed Rate Cuts, Trump, and Bitcoin’s Upward Stride

Hong Kong Ethereum ETF Staking Could Be Approved This Year

Coinpedia Fintech News

X Account of a Major Altcoin Listed on Binance Hacked! Airdrop Shares Are Being Made! "Do Not Cli...

Memecoins not the ‘right move’ for celebs, but DApps might be — Skale Labs exec

Join our free newsletter for daily crypto updates!