FLOKI Trading Bot

What happened

The FLOKI team announced an exploit in its Telegram trading bot and took it offline. They are identifying affected users and will move remaining funds to new secure wallets. Users are instructed not to deposit into bot wallets, to move any funds from exported private keys to self-controlled wallets, and to ignore unsolicited “refund/recovery” messages.

Details

Date

Nov 5, 2026

Kind

Hack or exploit

Method

Unknown

How in

Keys, accounts and infrastructure

Target

DeFi protocol or token (estimate: SlowMist chain category)

Chains

BNB Chain

What would have stopped it all controls for this way in

• No one machine, person or organisation can move hot funds alone: keys in HSMs or MPC, threshold signers on separate infrastructure.
  Check: List every key that can move funds. For each: where it lives, who and what can reach it. Two keys behind one login count as one.
• Keys are generated offline from an audited random source, in a recorded ceremony.
  Check: A ceremony record exists for every live key: device, software version, witnesses.
• Freeze contacts are arranged before they are needed: stablecoin issuers, the large exchanges, SEAL 911.
  Check: A contact sheet with named people, confirmed this quarter; one drill sending a freeze request.

General guidance for this kind of attack, not a finding about this incident.

How sure: 0 of 4 checks what the checks mean

• Witnessesone source so far
• Same storyneeds a second source
• Blockchain receiptno public attack transaction checked
• Official wordno official statement linked

Who says what

• SlowMist Hacked ↗no figure

Related incidents