Skip to main content
AVOID.NET

SIGMA Bot

avoid.net/sigma-bot→26/100·72% conf.
[✓ FACT-CHECKED]· reviewed 3 times · last review 3 Jun 2026

Last changed 2026-10-10 · Score recalculated — Rescored under Scoring v2, the published formula (avoid.net/scoring): 4 → 26. Problems weighed by who is responsible: the subject's own conduct −50, concerns that are not fraud −24, problems around the subject, caused by others −1.1; legitimacy credit long-running +2; no established finding that it defrauded anyone, so it stays out of the red band; fact-check adjustments (−18) now shown as page reliability, not in the score. Version history →

Why this score
Every page starts at65
The subject's own conduct-50
Concerns that are not fraud-24
Problems around it, caused by others-1.1
Long-running+2
Sum-8
  • No established finding that it defrauded anyone, so it stays out of the red band (26 or above).

Score: 26/100 (kept between 0 and 100)

How scoring works →
anchored·3MXXjk…qh4V
last updated 2026-10-10

Summary

SIGMA is a multi-chain Telegram trading bot operating at sigma.win that supports Ethereum, BSC, Base, Solana, Avalanche, and other networks. On May 11, 2026, a crypto trader known as Unihax0r suffered a private key compromise draining over $200,000 across Ethereum, Base, and BSC, with both affected wallets traceable exclusively to SIGMA's wallet generation infrastructure. SIGMA has published no post-mortem, security advisory, or public statement in response to the incident as of late May 2026.

Connected Entities

7 entities · 60 linked investigations
Relationships
  • SIGMA Bot→mentioned with→Polycule(65%)
  • SIGMA Bot→mentioned with→Ethereum(80%)
  • SIGMA Bot→mentioned with→Jupiter Exchange(60%)
  • SIGMA Bot→mentioned with→Solana(65%)
  • Polycule→mentioned with→Solana(80%)
  • Jupiter Exchange→mentioned with→Polymarket(60%)
  • SIGMA Bot→mentioned with→Polymarket(65%)
  • SIGMA Bot→mentioned with→Banana Gun(80%)
  • Jupiter Exchange→mentioned with→Solana(80%)
  • Jupiter Exchange→mentioned with→Ethereum(60%)
  • + 4 more
Have evidence about SIGMA Bot?

Timeline(7 events)

19 September 2024

Banana Gun Telegram bot exploited via Telegram message oracle vulnerability; approximately $3 million drained from 11 users. Bot issued post-mortem and reimbursed all affected users — establishing an industry precedent SIGMA has not followed.

CoinTelegraph

13 January 2026

Polycule, a Telegram trading bot on Polymarket, hacked for approximately $230,000.

KuCoin News

11 May 2026

Between 00:37 and 00:56 UTC, attacker drains over $200,000 from two wallets belonging to trader Unihax0r across Ethereum, Base, and BSC. Both wallets were created exclusively through SIGMA. Attack confirmed as private key compromise, not a smart contract exploit.

CryptoTimes

11 May 2026

At 01:53 UTC, Unihax0r posts publicly on X: 'Just got drained or hacked for more than 200k. Sick to my stomach.' Shares attacker wallet address 0xF7cFFC27732a5C9c4E2D592F3E33435F8dDb019A.

CryptoTimes

11 May 2026

On-chain analyst @k0braca1 publicly states the attack bears hallmarks of private key leakage with full signing control across chains, ruling out malicious approvals.

Crypto Economy

11 May 2026

Multiple crypto news outlets including CryptoTimes, CryptoNews.net, MEXC News, Crypto Economy, and Cryptopolitan publish coverage of the incident, all noting SIGMA's silence.

CryptoNews.net

31 May 2026

As of this date, SIGMA has issued no public statement, post-mortem, security advisory, or acknowledgment of the incident across any documented channel.

AVOID.NET investigation (confirmed via multi-source search)
Provenance & Audit Trail

Decision Log

  • #8rescore+22Recorded on Solana ✓10/10/2026, 6:42:49 PM
    slot 455362588 · hash EPpjTNEhx6hCCnWGwqtBgSUj1h9eEMCGboWfS7FLCaQY
  • #7review approveRecorded on Solana ✓6/3/2026, 4:23:53 AM
    slot 423953612 · hash AoAfWrWcUXYgHmhE1yZUEJAAgvCVBKNveYAMqgD2M9QF
  • #6reviewRecorded on Solana ✓6/3/2026, 4:23:52 AM
    slot 423953605 · hash 5cqsq8jj3LAE6deCKKRVLoLDyw5Qz9ThktLKaosZJ3jH
  • #5review revise-10Recorded on Solana ✓6/2/2026, 4:20:07 PM
    slot 423844516 · hash 9rkTMqm9zieC8JWeQupVzvuuF2LVDHqkhF7jiHVKjFt8
  • #4reviewRecorded on Solana ✓6/2/2026, 4:20:06 PM
    slot 423844500 · hash 5K2WrNSfubmDYqyJeiHh4bTvRFZRMQMYonGPDgvnnjaY
  • #3review revise-8Recorded on Solana ✓6/2/2026, 2:51:59 AM
    slot 423722395 · hash DwvzD63fFvEbTy3bNcn9FunuFmLSZDUkU2G3yK4ECouR
  • #2reviewRecorded on Solana ✓6/2/2026, 2:51:59 AM
    slot 423722393 · hash APJCQM25i9d2ZeYAe6A6wgxccELVFGy3esaC3T82LU74
  • #1publishRecorded on Solana ✓5/31/2026, 7:24:59 AM
    slot 423328416 · hash 7qRa75rKDFqh62zuUu6rYCFsMgcTQmX5o1sZhsi4xzDo

This investigation is cryptographically anchored to the Solana blockchain (8 decisions). 16 of 18 cited source URLs have an Internet Archive snapshot.

model: claude-sonnet-4-6

generated: 5/31/2026, 7:24:48 AM

last updated: 10/10/2026, 6:42:49 PM

7 views

avoid.net — verified advice for a post-truth world