Banana Gun 团队在报告神秘提款后禁用 Telegram 机器人

香蕉枪（BANANA）团队的最新消息称，尽管有报道称用户钱包中未经授权的交易充斥着加密社交媒体，但其后端并未受到损害。

Banana Gun (BANANA) has disabled its Telegram bot following reports of unauthorized transactions from user wallets.

在收到用户钱包未经授权交易的报告后，Banana Gun (BANANA) 已禁用其 Telegram 机器人。

The team announced the measure in a statement on Monday, adding that its back-end was uncompromised.

该团队在周一的一份声明中宣布了这一措施，并补充说其后端并未受到损害。

"We have confirmed that our back-end is not exploited," the statement reads.

声明中写道：“我们已经确认我们的后端没有被利用。”

However, the team suggested that a front-end vulnerability may be the root cause.

然而，该团队表示，前端漏洞可能是根本原因。

"We are leaning towards a vulnerability in the front-end," the statement adds.

“我们倾向于前端的漏洞，”声明补充道。

While scant details were disclosed, the team’s statement implied that the exploit may have originated from Telegram.

虽然透露的细节很少，但该团队的声明暗示该漏洞可能源自 Telegram。

Although unconfirmed, it’s possible that the ten or so affected users interacted with malicious links.

尽管未经证实，但这十名左右受影响的用户可能与恶意链接进行了交互。

Phishing scammers have launched a deluge of harmful campaigns this year, attempting to steal cryptocurrencies and digital assets from web3 participants.

网络钓鱼诈骗者今年发起了大量有害活动，试图从 web3 参与者那里窃取加密货币和数字资产。

The team encouraged the public to reach out with helpful information or to report further cases.

该团队鼓励公众提供有用的信息或报告更多案件。

"If you have any insights that may help us, feel free to send us a direct message here on Twitter," the statement concludes.

声明总结道：“如果您有任何可以帮助我们的见解，请随时在 Twitter 上直接向我们发送消息。”

Banana Gun’s tool has generated over $35 million in all-time fees, according to DefiLlama.

据 DefiLlama 称，Banana Gun 的工具已产生超过 3500 万美元的历史费用。

Thousands of users reportedly employ the Telegram trading bot to quickly execute swaps.

据报道，数千名用户使用 Telegram 交易机器人来快速执行掉期交易。

If Telegram emerges as the issue’s origin, Banana Gun would be the second decentralized finance protocol to suffer a web2-based exploit this week.

如果 Telegram 成为问题的根源，Banana Gun 将成为本周第二个遭受基于 web2 攻击的去中心化金融协议。

On Sept. 18, hackers gained access to the website of Ethena Labs, a synthetic dollar issuer.

9 月 18 日，黑客侵入了合成美元发行商 Ethena Labs 的网站。

Similar to the Telegram bot, Ethena paused its website until the issue was resolved.

与 Telegram 机器人类似，Ethena 暂停了其网站，直到问题得到解决。

"We've worked with the registrar to regain control of our domain and had the phishing domains blocked across various services to protect our users," a statement from Ethena reads.

Ethena 的一份声明中写道：“我们已与注册商合作，重新获得对我们域名的控制，并在各种服务中屏蔽了网络钓鱼域名，以保护我们的用户。”

"To reiterate, the protocol is not affected and funds are secure. ethena[.]fi remains the only official domain and we will… https://t.co/x7twAcUNGr

“重申一下，协议不受影响，资金也是安全的。ethena[.]fi 仍然是唯一的官方域名，我们将...... https://t.co/x7twAcUNGr