Is BONKbot safe to connect?

Telegram trading bot · Solana. Checked 2026-10-24; every line links its source.

Worst case: BONKbot's backend generates and stores your trading wallet's key and signs when your Telegram tells it to. A hijacked Telegram account without 2FA, a leaked exported key, or a failure of BONKbot's key system could let someone drain the wallet.

Already lost funds? What to do if a bot or wallet is drained.

Safe setup in 3 steps

Turn on BONKbot's 2FA or passkey so that withdrawals and private-key export need a second factor even if your Telegram is hijacked
Only start @bonkbot_bot (or the alternates listed in docs.bonkbot.io); fake bots ask you to 'deposit SOL', and real admins never DM first
Don't paste your exported BONKbot key into other bots or apps (the 2024 drain victims had done exactly that), and keep only trading funds in the bot

BONKbot also has a full listing with an Agent Risk Score Agent risk 50% (partial, 2 of 7 inputs): BONKbot on TradingAgentStack.

What it can do with your money

Who holds the keys	The service holds the keys BONKbot calls itself non-custodial since its 2024 key-management system (KMS), but its own post says the Signer 'generates the user's private key and stores it encrypted' on BONKbot's backend (hardware security module (HSM)-backed), with signing authorized only through your Telegram. Private key export and SOL withdrawals can be gated behind 2FA or a passkey. source
Can funds be sent out to any address?	Yes. SOL withdrawals out of the bot are supported; with 2FA or a passkey enabled, withdrawals and private key export need the second factor. source

Official links

Each link below was confirmed from at least two independent places (the vendor's own pages plus another source). Anything else using this name is not on the list.

Website: bonkbot.io
Telegram: @bonkbot_bot
X: @bonkbot_io

Where we confirmed these

https://bonkbot.io/blog/a-hardware-wallet-in-the-cloud-introducing-bonkbot-s-next-gen-key-management-system (links bonkbot.io, docs.bonkbot.io, x.com/bonkbot_io, t.me/bonkbot_bot)
https://docs.bonkbot.io/bonkbot/quick-setup-guide/initializing-bonkbot.md (bot link t.me/bonkbot_bot)
https://docs.bonkbot.io/bonkbot/safety-and-security/avoiding-scams.md (official bot link t.me/bonkbot_bot)
https://www.cryptopolitan.com/bonkbot-is-going-non-custodial-with-increased-security-measures/ (third-party: @bonkbot_io, bonkbot.io blog)

Incidents

Items marked "reported by users" are claims we could not confirm with the vendor or a security firm.

Date	What happened	Amount	Outcome	Source
2024-03-29	Wallet-drainer wave hit 302 Solana wallets; 113 victims had used BONKbot. BONKbot denied it was the source and said all 113 had exported their keys to another app (Solareum suspected) (reported by users)	~2,808 SOL (~$523K) total across all victims	BONKbot denied responsibility; no refunds reported	source

Check a link

Got a link, @handle or repo that claims to be BONKbot? Paste it to see if it's on the official list.

Checking links inside Telegram? Send them to @TASCheckBot, or add it to your group so anyone can type /check. Alerts on new drains and fakes: @tradingAgentStk.

Get an alert for BONKbot

We email you if we add an incident, a freeze report, a known fake or a deadline for BONKbot. Free; unsubscribe anytime.

More checks: Telegram trading bots

Trojan Maestro Banana Gun Bloom Sigma Unibot BasedBot SolTradingBot MevX

Something wrong or out of date? Send a correction with a link to the vendor's docs. Not financial advice. How we check.