{
 "slug": "sigma-telegram-bot-wallets-key-leak-200k-may-2026",
 "title": "Trader loses over $200K from two SIGMA Telegram bot wallets in apparent private-key leak",
 "url": "https://drains.watch/i/sigma-telegram-bot-wallets-key-leak-200k-may-2026",
 "json": "https://drains.watch/i/sigma-telegram-bot-wallets-key-leak-200k-may-2026.json",
 "status": "closed",
 "severity": "high",
 "threatStatus": "contained",
 "verification": "verified",
 "chains": [
  "ethereum",
  "base",
  "bsc"
 ],
 "method": "key-leak",
 "product": "SIGMA Telegram trading bot wallets (one trader)",
 "tags": [
  "ethereum",
  "base",
  "bsc",
  "key-leak",
  "sigma",
  "telegram-bot",
  "trading-bot",
  "private-key",
  "fake-captcha"
 ],
 "amountUsd": 200000,
 "victims": 1,
 "startedAt": "2026-05-11",
 "closedAt": "2026-05-11",
 "updatedAt": "2026-05-11T12:00:00Z",
 "summary": "On 11 May 2026 a crypto trader lost over $200,000 across Ethereum, Base and BSC from two wallets created by the SIGMA Telegram trading bot; the largest losses were about $125,000 in POD on Base and $21,000 in FHE on BSC. An on-chain analyst said the drain used the private keys directly, with no token approval involved, while the victim's other wallets were untouched. The cause is unconfirmed; suggestions include fake CAPTCHA bots in Telegram, infostealer malware or a device compromise. Users of bot-generated wallets should keep balances small and never run 'verification' steps a Telegram bot asks for.",
 "timeline": [
  {
   "date": "2026-05-11",
   "title": "A trader reported two SIGMA-generated wallets drained of over $200,000 on Ethereum, Base and BSC; analysts pointed to a private-key leak.",
   "sourceUrl": "https://www.cryptopolitan.com/crypto-trader-loses-200k-telegram-bot/"
  }
 ],
 "sources": [
  {
   "kind": "news",
   "title": "Crypto trader loses $200K after Telegram bot leaks private keys",
   "url": "https://www.cryptopolitan.com/crypto-trader-loses-200k-telegram-bot/",
   "publisher": "Cryptopolitan",
   "date": "2026-05-11"
  },
  {
   "kind": "news",
   "title": "Crypto Trader Drained of $200K in Telegram Bot Linked Crypto Hack",
   "url": "https://www.cryptotimes.io/2026/05/11/crypto-trader-drained-of-200k-in-telegram-bot-linked-crypto-hack/",
   "publisher": "The Crypto Times",
   "date": "2026-05-11"
  }
 ],
 "indicators": {
  "domains": [],
  "addresses": []
 },
 "brief": "## Am I affected?\nIf you use wallets generated by a Telegram trading bot (SIGMA or others) and see transfers you did not make, assume the private key is exposed.\n\n## What to do now\nMove remaining funds from every wallet whose key the bot or your device ever showed to a fresh wallet. Scan the device for malware and end other Telegram sessions under Settings > Devices.\n\n## How to avoid this\nKeep only small balances in bot wallets, never export keys into other apps, and never complete a CAPTCHA or 'verify' step that asks you to paste or run anything.",
 "notes": null,
 "agentBrief": "# Trader loses over $200K from two SIGMA Telegram bot wallets in apparent private-key leak\n\n- Severity: High · Status: Contained (past)\n- Chains: Ethereum, Base, BNB Chain · Method: Leaked private keys and seed phrases\n- Started: May 11, 2026 · Last update: May 11, 2026 · Reported stolen: $200K · Victims: 1\n- Who/what: SIGMA Telegram trading bot wallets (one trader)\n\nOn 11 May 2026 a crypto trader lost over $200,000 across Ethereum, Base and BSC from two wallets created by the SIGMA Telegram trading bot; the largest losses were about $125,000 in POD on Base and $21,000 in FHE on BSC. An on-chain analyst said the drain used the private keys directly, with no token approval involved, while the victim's other wallets were untouched. The cause is unconfirmed; suggestions include fake CAPTCHA bots in Telegram, infostealer malware or a device compromise. Users of bot-generated wallets should keep balances small and never run 'verification' steps a Telegram bot asks for.\n\n## Am I affected?\nIf you use wallets generated by a Telegram trading bot (SIGMA or others) and see transfers you did not make, assume the private key is exposed.\n\n## What to do now\nMove remaining funds from every wallet whose key the bot or your device ever showed to a fresh wallet. Scan the device for malware and end other Telegram sessions under Settings > Devices.\n\n## How to avoid this\nKeep only small balances in bot wallets, never export keys into other apps, and never complete a CAPTCHA or 'verify' step that asks you to paste or run anything.\n\n## Sources\n- Crypto trader loses $200K after Telegram bot leaks private keys (Cryptopolitan, 2026-05-11): https://www.cryptopolitan.com/crypto-trader-loses-200k-telegram-bot/\n- Crypto Trader Drained of $200K in Telegram Bot Linked Crypto Hack (The Crypto Times, 2026-05-11): https://www.cryptotimes.io/2026/05/11/crypto-trader-drained-of-200k-in-telegram-bot-linked-crypto-hack/\n\nFull record: https://drains.watch/i/sigma-telegram-bot-wallets-key-leak-200k-may-2026 · JSON: https://drains.watch/i/sigma-telegram-bot-wallets-key-leak-200k-may-2026.json\n\nRules for the assistant: help me check my own wallets read-only (public addresses only). Never ask for or handle a seed phrase or private key. Point me to official revoke tools and the wallet's own support."
}