# Is Banana Gun safe? Check before you connect

> Banana Gun: worst case for your money, official links, freeze and key risks, incidents and a 3-step safe setup. Sourced, checked 2026-10-24.

Canonical: https://tradingagentstack.com/check/banana-gun/

1. [Home](https://tradingagentstack.com/)

2. [Check](https://tradingagentstack.com/check/)

3. Banana Gun

# Is Banana Gun safe to connect?

Telegram trading bot · Ethereum, Solana, BNB Chain, Base, MegaETH. Checked 2026-10-24; every line links its source.

**Worst case:** Banana Gun holds your bot wallet's private key and you can't retrieve it after setup. A flaw in its systems (as in the 2024 Telegram message-oracle exploit that drained about $3M from 11 users) or a hijacked Telegram account can move everything in that wallet to someone else.

Already lost funds? [What to do if a bot or wallet is drained](https://tradingagentstack.com/trading-bot-drained-what-to-do/).

## Safe setup in 3 steps

1. Save the private key the moment the wallet is generated (it can't be retrieved later), and keep only trading money in it

2. Use only the bots listed on bananagun.io or docs.bananagun.io (e.g. @BananaGun_bot), and ignore 'support' DMs on Telegram

3. Turn on the bot's security PIN and transfer 2FA, plus Telegram 2-step verification, and move profits out to a wallet the bot never sees

Banana Gun also has a full listing with an Agent Risk Score [Agent risk 50% (partial, 2 of 7 inputs)](https://tradingagentstack.com/methodology/#agent-risk-score): [Banana Gun on TradingAgentStack](https://tradingagentstack.com/tool/banana-gun/).

## What it can do with your money

| Who holds the keys | The service holds the keys The bot generates the wallet and holds the key to trade. The private key is shown once at creation; Banana Gun's FAQ says it doesn't let you retrieve the key later ('You can't'), and a deleted wallet is unrecoverable if you didn't save the key. [source](https://banana-gun.gitbook.io/banana-gun/trading/faqs.md) |
| --- | --- |
| Can funds be sent out to any address? | Yes. You can send tokens to any outside address via 'Custom Wallet'. After the 2024 exploit the team said transfers now have a 2-hour delay and 2FA (per The Block, 2024-09-25). [source](https://banana-gun.gitbook.io/banana-gun/trading/settings/wallet-settings.md) [source](https://www.theblock.co/post/318074/banana-gun-exploit-refund) |

## Official links

Each link below was confirmed from at least two independent places (the vendor's own pages plus another source). Anything else using this name is not on the list.

- Website: `bananagun.io`

- Telegram: `@BananaGun_bot`

- Telegram: `@BananaGunSniper_bot`

- Telegram: `@BananaGunSell_bot`

- Telegram: `@bananagunannouncements`

- X: `@BananaGun`

Where we confirmed these
- https://bananagun.io (links t.me/BananaGun_bot, t.me/bananagunannouncements, x.com/bananagun, pro.bananagun.io, docs.bananagun.io)

- https://docs.bananagun.io/resources/official-links.md (lists bananagun.io, t.me/BananaGunSniper_bot, t.me/BananaGunSell_bot, t.me/bananagunannouncements, x.com/BananaGun)

- https://www.coingecko.com/en/coins/banana-gun (third-party: bananagun.io, twitter.com/bananagun, t.me/BananaGunSniper_bot, t.me/BananaGunSell_bot)

- https://programminginsider.com/banana-gun-unifies-five-chains-into-one-telegram-bot-backed-by-16b-in-execution-history/ (2026-03-05 article: t.me/BananaGun_bot as the unified bot)

## Incidents

Items marked "reported by users" are claims we could not confirm with the vendor or a security firm.

| Date | What happened | Amount | Outcome | Source |
| --- | --- | --- | --- | --- |
| 2024-09-19 | Unauthorized transfers drained 11 users' bot wallets; Banana Gun blamed a vulnerability in the Telegram message oracle it uses and took the bots offline | ~$3M (initial estimates ~$1.9M in ETH) | full refund from the Banana Gun treasury promised 2024-09-25; we found no independent report confirming it was paid | [source](https://www.theblock.co/post/318074/banana-gun-exploit-refund) |

## Check a link

Got a link, @handle or repo that claims to be Banana Gun? Paste it to see if it's on the official list.

Checking links inside Telegram? Send them to [@TASCheckBot](https://t.me/TASCheckBot), or add it to your group so anyone can type `/check`. Alerts on new drains and fakes: [@tradingAgentStk](https://x.com/tradingAgentStk).

## Get an alert for Banana Gun

We email you if we add an incident, a freeze report, a known fake or a deadline for Banana Gun. Free; unsubscribe anytime.

## More checks: Telegram trading bots
[Trojan](https://tradingagentstack.com/check/trojan/)[Maestro](https://tradingagentstack.com/check/maestro/)[BONKbot](https://tradingagentstack.com/check/bonkbot/)[Bloom](https://tradingagentstack.com/check/bloom/)[Sigma](https://tradingagentstack.com/check/sigma/)[Unibot](https://tradingagentstack.com/check/unibot/)[BasedBot](https://tradingagentstack.com/check/basedbot/)[SolTradingBot](https://tradingagentstack.com/check/soltradingbot/)[MevX](https://tradingagentstack.com/check/mevx/)

Something wrong or out of date? [Send a correction](https://tradingagentstack.com/submit/) with a link to the vendor's docs. Not financial advice. [How we check](https://tradingagentstack.com/check/#method).

## For agents

- [When to use this site, and the page index](https://tradingagentstack.com/llms.txt)
- [Sitemap](https://tradingagentstack.com/sitemap.xml)
- [Contact](https://tradingagentstack.com/contact/)
- [MCP server](https://tradingagentstack.com/mcp/)
- [MCP discovery](https://tradingagentstack.com/.well-known/mcp)