Curriculum·Sophomore·S210
Automation Literacy: What Bots Actually Do
10 October 2025, read as an automation event.6 million trading accounts, and CoinGlass put long positions at roughly 85 to 90 percent of the liquidations.
Lesson 1 opens on
Banana Gun, September 2024
In September 2024 attackers exploited a vulnerability in a Telegram message oracle used by the Banana Gun trading bot, which Banana Gun's post-mortem named as the likely root cause of attackers manually transferring ETH out of victims' wallets while the bots were in use. Approximately $3M was drained from 11 users by the company's final count, after early reports of 36, out of a user base one on-chain researcher put at more than 10,000. The operator switched the bots off, patched the vulnerability before bringing them back, committed to refunding affected users in full from its treasury without selling tokens, added a two-hour transfer delay and two-factor authentication on transfers, and announced audits of its back-end and front-end systems, which QuillAudits reports were carried out with Security Alliance as audits and penetration tests.
The lessons
- S210-01The bot taxonomyClassify any automation by where the keys live and what authority it holdsabout 30 min · opens on Banana Gun, September 2024
- S210-02The unifying insightState the single property every automated strategy shares, and derive its consequencesabout 31 min · opens on The grid that did exactly what it was told
- S210-03Reading a bot's marketingIdentify the four disclosures a performance claim requires, and treat each absence as a findingabout 30 min · opens on Backtest overfitting, formally
- S210-04AI bots specificallyDistinguish what a language model adds to an automation from what it does notabout 30 min · opens on Freysa, November 2024
- S210-05The security surfaceEnumerate the surface an automation introduces, including the components outside the productabout 30 min · opens on 3Commas, 2022
- S210-06When automation is genuinely the right toolIdentify the three tasks automation reliably improves, and what they have in commonabout 31 min · opens on The one automation with no regime bet
Labs
S210-L
Honest version of a marketing page
Take three supplied bot performance pages. Identify sample period, market regime, whether fees are included, configuration count and maximum drawdown (usually absent; note the absence as a finding). Write the honest version of each page.