{
 "tag": "sigma",
 "name": "Sigma",
 "group": "Other",
 "incidents": [
  {
   "slug": "sigma-telegram-bot-wallets-key-leak-200k-may-2026",
   "title": "Trader loses over $200K from two SIGMA Telegram bot wallets in apparent private-key leak",
   "url": "https://drains.watch/i/sigma-telegram-bot-wallets-key-leak-200k-may-2026",
   "json": "https://drains.watch/i/sigma-telegram-bot-wallets-key-leak-200k-may-2026.json",
   "status": "closed",
   "severity": "high",
   "threatStatus": "contained",
   "verification": "verified",
   "chains": [
    "ethereum",
    "base",
    "bsc"
   ],
   "method": "key-leak",
   "product": "SIGMA Telegram trading bot wallets (one trader)",
   "tags": [
    "ethereum",
    "base",
    "bsc",
    "key-leak",
    "sigma",
    "telegram-bot",
    "trading-bot",
    "private-key",
    "fake-captcha"
   ],
   "amountUsd": 200000,
   "victims": 1,
   "startedAt": "2026-05-11",
   "closedAt": "2026-05-11",
   "updatedAt": "2026-05-11T12:00:00Z",
   "summary": "On 11 May 2026 a crypto trader lost over $200,000 across Ethereum, Base and BSC from two wallets created by the SIGMA Telegram trading bot; the largest losses were about $125,000 in POD on Base and $21,000 in FHE on BSC. An on-chain analyst said the drain used the private keys directly, with no token approval involved, while the victim's other wallets were untouched. The cause is unconfirmed; suggestions include fake CAPTCHA bots in Telegram, infostealer malware or a device compromise. Users of bot-generated wallets should keep balances small and never run 'verification' steps a Telegram bot asks for."
  }
 ],
 "changes": [
  {
   "incident": "sigma-telegram-bot-wallets-key-leak-200k-may-2026",
   "incidentTitle": "Trader loses over $200K from two SIGMA Telegram bot wallets in apparent private-key leak",
   "severity": "high",
   "status": "closed",
   "threatStatus": "contained",
   "date": "2026-05-11",
   "title": "A trader reported two SIGMA-generated wallets drained of over $200,000 on Ethereum, Base and BSC; analysts pointed to a private-key leak.",
   "sourceUrl": "https://www.cryptopolitan.com/crypto-trader-loses-200k-telegram-bot/",
   "url": "https://drains.watch/i/sigma-telegram-bot-wallets-key-leak-200k-may-2026"
  }
 ]
}