Audit log

Every state-changing event for Banana Gun: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

1. #1publishby system:backfill

   2026-05-28 03:28:38Z
   Score: ? → ? (no score change)
   anchoranchored

   chain

   ●mainnet-betaslot 422,638,443

   sig

   4ksd5MsmY5tp…fBwdNATUcopyexplorer ↗

   hash

   2NEMTreSPFad…ytpQL1Tucopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (7205 B) ▸

   {"actor":"system:backfill","investigation_id":"e2751303-feeb-4ea9-9290-cc4fd3a5f2a4","kind":"publish","page_slug":"banana-gun","published_at":"2026-05-28T03:28:38.471Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Banana Gun","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://bitkan.com/learn/what-is-banana-gun-and-is-it-a-good-investment-20808","type":"other","url":""},{"credibility":3,"name":"https://www.shoal.gg/p/banana-gun-telegram-sniper-bot","type":"other","url":""},{"credibility":3,"name":"https://www.coingecko.com/en/coins/banana-gun","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.web3isgoinggreat.com/?id=banana-gun-bot-flubbed-token-launch","type":"other","url":""},{"credibility":3,"name":"https://www.theblock.co/post/250395/hyped-telegram-bot-banana-guns-team-dumps-treasury-after-token-bug","type":"other","url":""},{"credibility":3,"name":"https://cointelegraph.com/news/banana-gun-failed-contract-passed-audits-but-chat-gpt-found-the-bug-in-seconds","type":"other","url":""},{"credibility":3,"name":"https://beincrypto.com/crypto-project-banana-gun-contract-bug/","type":"other","url":""},{"credibility":3,"name":"https://tokeninsight.com/en/news/banana-gun-refunded-740-eth-to-591-wallets-in-first-phase-of-compensation","type":"other","url":""},{"credibility":3,"name":"https://thedefiant.io/news/defi/hyped-banana-token-launch-wrecked-by-contract-bug","type":"other","url":""},{"credibility":3,"name":"https://crypto.news/banana-guns-redemption-plan-after-banana-token-crash/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://nothinginsignificant.substack.com/p/banana-bot-know-your-customer","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://nothinginsignificant.substack.com/p/banana-gun-holding-ethereum-hostage","type":"other","url":""},{"credibility":3,"name":"https://www.gate.com/learn/articles/how-the-banana-gun-siphoned-millions-of-dollars-from-users-and-ethereum-validators/3815","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.web3isgoinggreat.com/?id=banana-gun-exploit","type":"other","url":""},{"credibility":3,"name":"https://cointelegraph.com/news/banana-gun-crypto-bot-refunds-3m","type":"other","url":""},{"credibility":3,"name":"https://www.theblock.co/post/318074/banana-gun-exploit-refund","type":"other","url":""},{"credibility":3,"name":"https://cryptonews.com/news/telegram-bot-banana-gun-to-refund-3-million-hack-victims/","type":"other","url":""},{"credibility":3,"name":"https://www.quillaudits.com/blog/hack-analysis/banana-gun-exploit","type":"other","url":""},{"credibility":3,"name":"https://thedefiant.io/news/defi/banana-gun-pledges-to-pay-back-victims-of-usd3-million-exploit","type":"other","url":""},{"credibility":3,"name":"https://finance.yahoo.com/news/banana-gun-refund-3-million-123118171.html","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://cointelegraph.com/news/banana-gun-failed-contract-passed-audits-but-chat-gpt-found-the-bug-in-seconds","type":"other","url":""},{"credibility":3,"name":"https://www.quillaudits.com/blog/hack-analysis/banana-gun-exploit","type":"other","url":""},{"credibility":3,"name":"https://cryptonews.com/news/telegram-bot-banana-gun-to-refund-3-million-hack-victims/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://tokeninsight.com/en/coins/banana-gun/team","type":"other","url":""},{"credibility":3,"name":"https://www.rootdata.com/Projects/detail/Banana%20Gun?k=OTIxNQ%3D%3D","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.coingecko.com/en/coins/banana-gun","type":"other","url":""},{"credibility":3,"name":"https://coinmarketcap.com/currencies/banana-gun/","type":"other","url":""},{"credibility":3,"name":"https://www.binance.com/en/support/announcement/introducing-banana-gun-banana-on-binance-hodler-airdrops-subscribe-your-bnb-to-simple-earn-252eaa5e7a8646e6a4461f6057a06af4","type":"other","url":""}]}],"sources_used":[],"summary":"Banana Gun is a Telegram-based crypto trading bot launched in 2023 that allows users to snipe token launches on EVM chains and Solana. The project has experienced two major security incidents: a smart contract bug at token launch in September 2023 that caused the BANANA token to crash 99.7%, and a $3 million exploit in September 2024 in which attackers leveraged a Telegram message oracle vulnerability to drain 11 users. Separate, unresolved allegations from on-chain researchers claim the team arranged an exclusive order flow deal with block builder Titan that funneled millions of dollars in user bribe payments away from Ethereum validators.","timeline":[{"date":"2023-05-01","event":"Banana Gun bot launches on Telegram, targeting Ethereum token sniping. Team begins encouraging high priority bribe payments to gain transaction ordering advantage.","source":""},{"date":"2023-08-01","event":"Alleged frontrunning incident during $PENGY token launch. On-chain researchers later allege that wallets connected to the Banana Gun development team sniped ahead of a user who paid $4,000 less in bribes, profiting over $100,000.","source":""},{"date":"2023-09-11","event":"BANANA token launches on Ethereum. Price peaks at approximately $8.70 before crashing 99.7% to $0.02 within three hours due to a smart contract tax routing bug.","source":""},{"date":"2023-09-12","event":"Banana Gun team dumps approximately 950 ETH from treasury wallet to drain the liquidity pool, citing the contract bug. Community alleges potential rug pull; team maintains this was remediation. ChatGPT identifies the bug in seconds after two professional audits missed it.","source":""},{"date":"2023-09-01","event":"Banana Gun relaunches BANANA token on Uniswap v2 at $6.20 open with $2.1 million in locked liquidity. Airdrop and ETH compensation plan distributed: 740 ETH refunded to 591 wallets in the first phase.","source":""},{"date":"2023-10-01","event":"Banana Gun allegedly concludes exclusive order flow arrangement with Titan Builder. Researchers later allege this arrangement enabled Titan to grow from under 1% to over 40% of Ethereum block production, while diverting millions in user bribe payments.","source":""},{"date":"2024-09-19","event":"Banana Gun Telegram oracle exploit. Attacker exploits a vulnerability in the bot's Telegram message oracle, manually draining ETH from 11 experienced traders' wallets. Estimated loss: $3 million. Both EVM and Solana bots taken offline.","source":""},{"date":"2024-09-25","event":"Banana Gun confirms full $3 million reimbursement to all 11 exploit victims from the project treasury. No BANANA tokens sold to fund repayments. Security Alliance engaged for third-party audit. 2FA and two-hour transfer delays implemented.","source":""}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 207d8273-cd0a-4ee9-8b9c-adb52801a2a0copy
2. #2rescoreby systemsystem

   2026-10-27 06:05:08Z
   Score: 32 → 37 (+5)
   Rescored under Scoring v2, the published formula (avoid.net/scoring): 32 → 37. Problems weighed by who is responsible: the subject's own conduct −16, concerns that are not fraud −9.6, incidents the subject suffered −3.2, problems around the subject, caused by others −1.6; legitimacy credit long-running +2.
   anchoranchored

   chain

   ●mainnet-betaslot 461,965,083

   sig

   2Mj3rvFhm3g1…CyB9L7cJcopyexplorer ↗

   hash

   Hh6bsUXDTR6x…RUg2KAdicopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (671 B) ▸

   {"actor":"system","decided_at":"2026-10-27T06:05:08.298Z","decision":"rescore","investigation_id":"e2751303-feeb-4ea9-9290-cc4fd3a5f2a4","new_score":37,"page_slug":"banana-gun","prev_score":32,"reason":"Rescored under Scoring v2, the published formula (avoid.net/scoring): 32 → 37. Problems weighed by who is responsible: the subject's own conduct −16, concerns that are not fraud −9.6, incidents the subject suffered −3.2, problems around the subject, caused by others −1.6; legitimacy credit long-running +2.","score_delta":5,"score_model":"v2","sequence_num":2,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 4a062c07-5e50-4c19-9b1e-c9adcc8629d4copy
3. #3reviewby reviewerreviewer

   2026-11-02 05:11:30Z
   Score: 37 → 37 (no score change)
   The core incident narrative (2023 token launch bug, 2024 oracle exploit of about $3M across 11 users, treasury-funded refunds) is supported by the sources I fetched. Weak spots are the uncited Unibot/Maestro 'oracle-style' comparison (those were router-approval exploits in Oct 2023), the October 2023 Titan date (the Gate article dates Titan routing from Dec 2023), a Titan figure set that is internally inconsistent and unverified, and some wording that overstates (2FA as completed, 'confirms' reimbursement). The page hedges the unproven allegations adequately but omits the contrary analyst view on frontrunning. No shutdown or new exploit was found.
   anchoranchored

   chain

   ●mainnet-betaslot 464,373,038

   sig

   55yDTpDD6rkS…Mx7VjqeNcopyexplorer ↗

   hash

   EVEzASUTunZ7…WqyKA2V7copysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1542 B) ▸

   {"actor":"reviewer","artifact_identity":"5b74a93dd28d9c4307838ef555fec6f2","blocked_count":1,"decided_at":"2026-11-02T05:11:30.514Z","decision":"review","disputed_pct":0.1333,"findings_hash":"AKYHNDiFGfYcLzuWJxSWH6fhiqg7FUQYh9qe1vAfhkqx","investigation_id":"e2751303-feeb-4ea9-9290-cc4fd3a5f2a4","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":37,"omissions":{"material":0,"total":1},"page_content_hash":"3a7f8980c69b79cddafbf03976d4fb46f0309b442922dcc8f2d32beb62751cd5","page_slug":"banana-gun","prev_score":37,"reason":"The core incident narrative (2023 token launch bug, 2024 oracle exploit of about $3M across 11 users, treasury-funded refunds) is supported by the sources I fetched. Weak spots are the uncited Unibot/Maestro 'oracle-style' comparison (those were router-approval exploits in Oct 2023), the October 2023 Titan date (the Gate article dates Titan routing from Dec 2023), a Titan figure set that is internally inconsistent and unverified, and some wording that overstates (2FA as completed, 'confirms' reimbursement). The page hedges the unproven allegations adequately but omits the contrary analyst view on frontrunning. No shutdown or new exploit was found.","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"scored_claims":15,"sequence_num":3,"subject_status":"operating","subject_status_contradicts_page":false,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 98f55391-adb7-44b8-8664-0944d49eb0ffcopy
4. #4review reviseby judgejudge

   2026-11-02 05:11:30Z
   Score: 37 → 37 (no score change)
   The core incident narrative (the September 2023 token launch bug, the September 2024 Telegram oracle exploit of about $3M across 11 users, and the treasury-funded refund pledge) is confirmed by Tier 2 sources (claim_findings[5], [6], [8], [10]). Two of 15 checkable claims (about 13%) could not be verified (claim_findings[4], [15]), and one further claim could not be checked because its source blocked the reviewer (claim_findings[7]); that is a coverage limit, not a defect. Several statements need correction: the uncited Unibot and Maestro 'oracle-style' comparison (claim_findings[0]), the October 2023 Titan date, which sources place around December 2023 (claim_findings[1]), and wording that overstates 2FA and 'confirms' reimbursement (claim_findings[9], [10]). The Titan allegations rest on a single analyst's figures that are internally inconsistent, and the review lists independent corroboration as a high-priority gap (claim_findings[2]).
   anchoranchored

   chain

   ●mainnet-betaslot 464,373,043

   sig

   2M217e9bu2NQ…Z388y7vRcopyexplorer ↗

   hash

   31vxq6TTj3BZ…fUSG31QPcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (1633 B) ▸

   {"actor":"judge","artifact_identity":"5b74a93dd28d9c4307838ef555fec6f2","band_override":null,"blocked_count":1,"decided_at":"2026-11-02T05:11:30.514Z","decision":"review_revise","delist_requested":false,"disputed_pct":0.1333,"investigation_id":"e2751303-feeb-4ea9-9290-cc4fd3a5f2a4","judge_def_hash":"8800307026131ea9d5da939d32b9a1f1884b2b84a5de33c8e87931d36f38d0f8","new_score":37,"page_slug":"banana-gun","prev_score":37,"reason":"The core incident narrative (the September 2023 token launch bug, the September 2024 Telegram oracle exploit of about $3M across 11 users, and the treasury-funded refund pledge) is confirmed by Tier 2 sources (claim_findings[5], [6], [8], [10]). Two of 15 checkable claims (about 13%) could not be verified (claim_findings[4], [15]), and one further claim could not be checked because its source blocked the reviewer (claim_findings[7]); that is a coverage limit, not a defect. Several statements need correction: the uncited Unibot and Maestro 'oracle-style' comparison (claim_findings[0]), the October 2023 Titan date, which sources place around December 2023 (claim_findings[1]), and wording that overstates 2FA and 'confirms' reimbursement (claim_findings[9], [10]). The Titan allegations rest on a single analyst's figures that are internally inconsistent, and the review lists independent corroboration as a high-priority gap (claim_findings[2]).","reviewer_def_hash":"bc11388ce4bc4deea1b064fea362663ae06e3f4f687f99604769044d6ffba770","score_delta":0,"scored_claims":15,"sequence_num":4,"submission_content_hash":null,"submission_id":null,"submission_kind":null,"submission_valence":null,"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 29e20dfa-bbf6-4763-9f88-397b09ecfaa3copy