Are Telegram Trading Bots Safe? The Custody Truth Nobody Leads With
Last verified: November 7, 2026 (three hacks of October 29 to November 7 added; incident table extended to October: a copy-trading bot drained through its key-export feature, and the four shapes the fake bot takes now). Custody mechanics verified August 15, 2026. No referral links on this page. This is the page we wish had existed when we started using these bots.
Search this question and you will find bot companies grading their own homework and affiliate sites that answer "yes" above a signup button.
Here are the actual mechanics, the actual incident history, and the one rule that follows from both.
What actually happens to your money
When you start any Telegram trading bot, it generates a fresh wallet for you. This is the design's genius and its risk in one move.
The genius: you never connect your personal wallet, never sign approvals with it, so a bot cannot touch what you did not deposit. Your existing funds are structurally out of reach.
The risk: the generated wallet's keys live on the bot's infrastructure. Whatever the interface says about encryption or "your keys", if the bot's servers can sign your trades in milliseconds, the bot's infrastructure can spend your deposit.
That is custody in everything but name, and it applies to every bot in this category: Maestro, Banana Gun, BasedBot, BonkBot, Trojan, all of them. Each review on this site opens with the same custody line, and our full comparison table carries a custody column for exactly this reason.
Some document key export (BonkBot, Trojan), which helps you recover funds if the interface dies. It does not change who holds the live keys.
And the export screen is itself a door. On September 30, 2026 a copy-trading bot called TradeWiz was drained, and the team's own explanation was "a limited private key exposure occurred in the SOL PVP private key export feature". The way out was the way in. Details in the table below.
More: importing an existing wallet does not change who holds the keys
"You never connect your wallet" does not mean you can never use an existing address. Several bots offer to import a wallet by pasting its private key.
That does not change the custody model, it extends it: an imported key lives on the bot's infrastructure exactly like a generated one. So if you import anything, import a dedicated trading wallet that holds only what you trade, never the wallet where your long-term funds sit.
The incident record through October 2026
| Date | Bot | What happened | Outcome for users |
|---|---|---|---|
| Oct 2023 | Maestro | Router contract exploited, ~280 ETH taken from 106 users. Maestro's 2023 exploit, honestly told | Fully refunded within ~1 day (610 ETH paid out) source |
| Sept 2024 | Banana Gun | Telegram message oracle flaw, ~$3M drained from 11 users. Banana Gun's two incidents | Fully refunded from treasury, 2FA added source |
| Late 2025 | GMGN (terminal) | Phishing clone sites, not the platform itself, stole $700K+ from users. The GMGN security file | Individual losses, not refundable by the platform source |
| May 2026 | Sigma (bot, not reviewed here) | Over $200,000 drained from one trader's wallets in under half an hour. The wallets had been generated by the bot, then imported into other tools, so the keys lived in three places. Reports attribute it to the bot, with "allegedly" | No statement from the Sigma team as of October 2026 source |
| June 2026 | BullX (terminal) | No hack: trading suspended indefinitely, withdrawals left open | Funds retrievable, platform unusable source |
| Sept 30, 2026 | TradeWiz (copy bot, not reviewed here) | About 20,932 wallets emptied in two and a half hours, about $459,000. The team: "a limited private key exposure occurred in the SOL PVP private key export feature". The attacker had been a paying customer first | No refund or key count announced as of October 17 source |
Three hacks in ten days, and none of them was the chain (added November 7, 2026). On October 29, about $6.3B left Binance's exchange hot wallets across nine chains, $2.8B of it frozen, withdrawals paused; that is the exchange, not the Binance Wallet app source. The same day, Polymarket lost $2.73M from 737 wallets in one hour through a compromised third-party provider, not its own contracts source. On November 6 and 7, at least $6.01M was drained from more than 44,000 Keplr wallets opened with a Google or Apple login, after the login provider Web3Auth reported an incident; Keplr says recovery-phrase and hardware wallets were not affected source. The lesson for bot and app users: the weak point was a layer around the wallet each time. If your wallet sits behind a social login, know which company runs that login. Other apps we cover use different login providers; nothing here says they are affected.
More: how this table is compiled, and how to report a missing row
Methodology: this table is compiled from official team announcements, specialist press and public post-mortems, and every row links its source. If you know of an incident that is missing, tell @BetmanJoe and it will be added within 24 hours, dated.
Read the pattern: the serious bot teams refunded everything, fast, because their business dies otherwise.
The unrefundable losses came from fake sites, from a bot that has not explained itself, and from a key-export feature that leaked. The strangest failure mode was not theft but a platform simply stopping. All of these are real, and none of them is "the bot stole my money".
More: "no incident found" is not the same fact for every bot
As of October 17, 2026 we found no incident for BonkBot, Trojan, BasedBot and Photon, but weigh the age with the record: BasedBot since at least May 2025, Photon through the 2024-2025 wave, BonkBot and Trojan with no published launch year. "None found" over months and over years are not the same fact.
We weigh refunds heavily, and explain why in the Solana comparison and the multichain one.
The fake bot has four shapes now
Every one of these was documented by a security team, not by us, and every one ends with someone else holding your money. Here they are, newest first, with the one line that catches each.
1. The fake wallet extension. On October 7, 2026, Socket listed sixteen Firefox extensions that copied Rabby and OKX Wallet, one of them spelled "Raabby WaIIet", and sent the recovery phrase you typed to the attacker source.
An extension that asks for your recovery phrase is stealing it, whatever its name is spelled like.
2. The rented AI bot. On September 29, 2026 the SEC charged two groups that sold "AI-trading bot programs" with guaranteed profits, $15.3M taken in total. Its own words: "the trading platforms and bots were entirely fictitious with no actual trading occurring" source.
If someone rents you a bot with guaranteed profits, there is no bot.
3. The installer. On September 17, 2026, HP documented a fake AI trading bot site, tradingclaw[.]pro, whose installer replaced the browser wallet extension with a copy that sends your password to the attacker source.
None of the tools on this site will ever ask you to download and run an installer.
4. The tutorial that makes you build it. TRM Labs counted 274.6 ETH, about $517,000, taken from 224 people between February and August 2026 by YouTube tutorials on "building your own AI arbitrage bot". The contract you deploy and fund forwards everything above 0.05 ETH to the operator source. The same scheme ran in 2024 and 2025, and worked then too.
If a tutorial ends with "now fund the contract", the tutorial is the scam.
Self-custody has a weak point too: the box it came in
This page argues that holding your own keys beats letting a bot hold them. In October 2026 that argument met its limit.
Ledger opened an investigation on October 9 into drained wallets sold by CryptoBilis, an authorized reseller in Southeast Asia, and told buyers to stop using the devices. On October 10 it confirmed that "one of the impacted users' devices contained an unauthorized hardware implant" source.
How much was taken is not settled. On-chain analysts put it between $87M and $93M in the first week; Ledger has confirmed no total and no cause beyond that one implant.
Your own keys protect you from the operator, not from the road your device traveled. Ledger's own advice is the whole of it: buy direct from the maker, and never set up a device that looks tampered with.
The one rule, and its corollaries
More: each move, with the incident behind it
- Save the key at creation, then leave the export screen alone. Every bot shows the wallet's private key once when it is generated. Store it like a password. Re-exporting it later, or pasting it into a second tool, puts the same key in more places: that is what the Sigma and TradeWiz rows above have in common.
- Type URLs, never follow them. The largest user losses of 2025 were clone sites. Bookmark the real bot and the real site once, from the official docs. One live example, seen in search results on September 12, 2026: a site calling itself "Axiom Pro, Robinhood Chain trading bot" on a domain that is not Axiom's. Re-checked October 11: still online, and now ranking in Google with a "review" page. We did not open it and neither should you.
- Withdraw profits on a schedule. A float stays a float only if you skim it. Weekly is fine. The habit matters more than the interval.
- Distrust any bot promising returns. Real bots sell execution and charge about 1% per trade. "AI trading bot guaranteed profit" is a different product category: theft.
More: legit is not the same as safe, and why both facts sit in the same table
The bots we review are legitimate businesses: real volume, published fees, multi-year records. Most of their teams are also anonymous, unaudited, and hold your deposit.
Both facts are true at once, which is exactly why this site marks incidents and custody on every comparison row and every review, including the ones we are paid a referral on. You deserve both facts in the same table.
FAQ
Can I lose more than I deposit?
No. Spot bots trade what you fund and nothing more. There is no leverage unless you seek out perps products, and no approval that reaches your other wallets.
How do I get my money back out?
Every bot has a withdraw command, and the friction is in the details rather than the button. We wrote one out step by step, screenshot by screenshot: how to withdraw from FOMO. The shape is the same elsewhere.
Is there a tool that never holds my money?
Yes, and it is worth knowing the category exists: wallet trackers watch addresses and alert you without ever taking a deposit. No custody, no float rule, no incident risk of this kind. They do not trade for you either, which is the trade-off.
Is it safer to use a web terminal instead?
Terminals like Axiom that connect to a wallet you control are structurally less custodial (a design point, not a recommendation: we stopped recommending Axiom in October 2026, see GMGN vs Axiom). Terminals with in-app wallets (GMGN, Photon) sit in between, and we put those two against each other in GMGN vs Photon. The float rule serves you identically in all three designs.
Which bots have no incident on record?
As of October 17, 2026, we found no incident for BonkBot, Trojan, BasedBot and Photon; Maestro and Banana Gun each had one breach, refunded in full. The ages behind those records, and outside cases such as TradeWiz, are in the incident record.
New tools the week they launch. The settings and fees that quietly cost you money. Alpha I would tell a friend.
Free, unsubscribe in one click. Spot an error on the site? Reply and tell me, it gets fixed the same day.