Trader loses over $200K from two SIGMA Telegram bot wallets in apparent private-key leak
SIGMA Telegram trading bot wallets (one trader)
On 11 May 2026 a crypto trader lost over $200,000 across Ethereum, Base and BSC from two wallets created by the SIGMA Telegram trading bot; the largest losses were about $125,000 in POD on Base and $21,000 in FHE on BSC. An on-chain analyst said the drain used the private keys directly, with no token approval involved, while the victim's other wallets were untouched. The cause is unconfirmed; suggestions include fake CAPTCHA bots in Telegram, infostealer malware or a device compromise. Users of bot-generated wallets should keep balances small and never run 'verification' steps a Telegram bot asks for.
Why this severity: $200K reported stolen, 1 victims.
- Started
- May 11, 2026
- Closed
- May 11, 2026
- Reported stolen
- $200K
- Victims
- 1
At risk
- SIGMA Telegram trading bot wallets (one trader)
- Ethereum wallets
- Base wallets
- BNB Chain wallets
What to do now
- Move remaining funds from every wallet whose key the bot or your device ever showed to a fresh wallet. Scan the device for malware and end other Telegram sessions under Settings > Devices.
Stay safe
Am I affected?
If you use wallets generated by a Telegram trading bot (SIGMA or others) and see transfers you did not make, assume the private key is exposed.
What to do now
Move remaining funds from every wallet whose key the bot or your device ever showed to a fresh wallet. Scan the device for malware and end other Telegram sessions under Settings > Devices.
How to avoid this
Keep only small balances in bot wallets, never export keys into other apps, and never complete a CAPTCHA or 'verify' step that asks you to paste or run anything.
Timeline 1
A trader reported two SIGMA-generated wallets drained of over $200,000 on Ethereum, Base and BSC; analysts pointed to a private-key leak.
Source
News & write-ups ›2
How this method works
A private key or seed phrase ends up somewhere readable: code on GitHub, an env file, a hacked server or cloud notes. Bots find it within minutes. Read about leaked private keys and seed phrases →
Follow new drains and updates in your feed reader or Telegram RSS bot.