BonkBot Review
Documented key security and a named Swiss operator on Solana
of 10
BonkBot scores 6.8 in crypto trading tools on desk research of its terms and documentation: a 1% published fee, documented key-management hardware and 2FA, and a named, registered Swiss operator. It trades Solana only, which keeps venue coverage at 3.
Fee
1% per successful swap; Solana network and priority fees extra
Custody
Non-custodial per terms; keys sealed in BonkBot's Signer system
Security
TPM 2.0, secure boot, RAM encryption, 2FA on withdrawals; no audit
Chain
Solana only, routed through Jupiter
Entity
Triple Spice AG, Zug, Switzerland, UID CHE-360.253.977
Scores
Each criterion carries equal weight. The overall score is the average of these 5 scores — (8.0 + 8.0 + 3.0 + 7.0 + 8.0) ÷ 5 = 6.8.
Pros
- Entity transparency (8): Triple Spice AG, Zug, confirmed active in the Swiss UID register
- Pricing transparency (8): 1% on each successful swap; failed swaps not charged
- Custody (8): terms say the company is not a custodian; staff cannot view or extract keys, per docs
- Security posture (7): TPM 2.0 servers, secure boot, RAM encryption and 2FA on withdrawals and key exports
Cons
- Venue coverage (3): Solana only
- Security posture (7): no external audit, penetration test or bug bounty is named
- The signing key is held on BonkBot's servers, so the bot wallet is a hot wallet
- The fee can be changed at the company's discretion once a new schedule is published
How BonkBot scores in crypto trading tools
BonkBot (styled BONKbot by its makers) is a Solana trading bot run from Telegram, rated in our crypto trading tools ranking on five criteria at equal weight, each marked 0 to 10. The marks rest on desk research of its terms, documentation and the Swiss company register, checked on 6 November 2026. We did not open a bot wallet or trade.
| Criterion | What the public record shows | Mark |
|---|---|---|
| Pricing transparency | 1% on each successful swap; failed swaps are not charged and there is no subscription. Network and priority fees extra. | 8 |
| Custody & API safety | Terms say the company "is not a custodian of your Digital Assets"; the docs say keys are sealed in a signing system staff cannot read. The key still sits on BonkBot's servers. | 8 |
| Venue coverage | Solana only, with swaps routed through Jupiter. | 3 |
| Security posture | TPM 2.0 servers, secure boot, RAM encryption, transaction templates, and 2FA for withdrawals and key exports. No external audit or bug bounty named. | 7 |
| Entity transparency | Terms name Triple Spice AG, Zug, Switzerland; the Swiss UID register lists it as an active stock corporation, CHE-360.253.977. | 8 |
The overall score is the plain average: (8 + 8 + 3 + 7 + 8) ÷ 5 = 6.8.
Two marks moved at this check. Entity transparency rose from 2 to 8: the July review found no operator, but the terms of service (last revised 3 July 2025) name Triple Spice AG, and the company appears in the official Swiss register. Security posture rose from 6 to 7 because the documentation now describes the key-management hardware and controls in detail, where the July review had only "end-to-end encryption and passkey integration." An earlier draft of this check gave 8; the category's security scale, set on 6 November 2026, marks security on the number of disclosed controls, and BonkBot's two score 7. The earlier score was 5.4.
Strongest criteria
Entity transparency (8). The terms name the company, give an address c/o Wadsack Zug AG on Bahnhofstrasse in Zug, and set Swiss law with arbitration in Zug. The Swiss UID register confirms the company as active, with the same address. That is the standard at which other operators in this ranking that state a company, a registration number and a jurisdiction score 8. The terms do not name the people who run the bot.
Pricing transparency (8). The fee page states 1% on each successful swap, so a 1 SOL buy pays 0.01 SOL, and selling later pays again. A swap bot that publishes its percentage scores high here. It is held at 8 because the terms let the company change the fee at its discretion once a new schedule is published, and the Telemetry cashback rates are not given on the fee page.
Custody & API safety (8). The terms and the Signer page both describe a non-custodial model, and the docs say the key is never visible to BonkBot staff, Telegram or a cloud vendor. It is not the top mark because the key is generated and kept on BonkBot's infrastructure and transactions are signed there, so users rely on that system and on their Telegram account. BonkBot's own advice is to treat the bot as a hot wallet.
Weakest criteria
Security posture (7). BonkBot's key-management page is the most specific security document among the Telegram bots in this ranking. It names dedicated servers with Trusted Platform Module 2.0 chips, secure boot that runs only BonkBot-signed images, RAM encryption and a master key that engineers cannot see. The Signer page adds that each transaction must match a human-readable template the user has approved, that 2FA is enforced for withdrawals and seed-phrase exports, and that per-transaction 2FA is optional. Of the six controls the category's security scale counts, two are disclosed: a named key-protection design and 2FA on withdrawals and exports. Two controls score 7, level with Altrady and Gunbot. The mark goes no higher because all of this is the company's own description; no external audit, penetration test or bug bounty is named, and claims such as "hardware wallet-level security" cannot be checked from outside.
Venue coverage (3): one chain. This is a measured limit of the product, not missing information. BonkBot trades Solana tokens only. That is a deliberate focus, and for someone trading only Solana memecoins it costs nothing, but the rubric counts connected venues or chains, so a single-chain bot scores low by definition.
What the score does not cover
- Execution speed, fill quality and the MEV protection modes, which cannot be measured without trading.
- The tokens themselves. Many tokens traded through such bots are new memecoins; BonkBot's own safety pages note that large holders can dump supply even when mint and freeze checks look clean. Our guide to wallet scams and phishing covers impersonator bots too.
- The separate Telemetry terminal and Nighthawk sniping tool, beyond sharing the same account and fee.
BonkBot vs Trojan and Banana Gun
On current marks BonkBot, at 6.8 and eighth of ten, leads the two other Telegram swap bots in the ranking: Trojan (5.2) by 1.6 points and Banana Gun (5.0) by 1.8. Its entity mark of 8 compares with 5 for Trojan and 2 for Banana Gun, and its security mark of 7 with 4 and 3; it documents its key handling where Banana Gun does not. Both lead BonkBot only on venue coverage: Banana Gun with eight named chains (6) and Trojan with Hyperliquid perpetuals on its Terminal (4), against BonkBot's 3.
Who it suits
The score supports BonkBot for Solana-only swap trading by someone who wants a published fee, a named Swiss operator and documented key controls, and who keeps only trading money in the bot wallet. It does not make the bot wallet a place for savings: the key is still held and used on a service's servers. Our guide to hot and cold wallets explains the difference.
How it compares
Bitsgap
Refusing API keys that can withdraw, across 16 named exchanges
3Commas
Published pricing and non-custodial, trade-only API keys
Altrady
API-only bots across 19 named exchanges from a named Dutch firm
Cryptohopper
No-withdrawal custody with plan prices and refund terms in full
Coinrule
Trade-only API keys written into its terms, with a named UK operator
TradingView
Charting with full plan pricing and refund rules, no custody
Gunbot
Self-hosted bot that keeps exchange keys on your own machine
Trojan
Solana trading in Telegram with a stated 1% fee and named operator
Banana Gun
A published percentage fee across eight chains
Sources
Scored from published primary sources rather than hands-on use. Every figure above comes from one of the pages below, on the date shown. Manufacturers change prices and specifications without notice — if something here no longer matches the source, tell us and we will correct it.
- 1.BONKbot — terms of service (last revised 3 July 2025) — checked
- 2.Swiss UID register — Triple Spice AG — checked
- 3.BONKbot docs — fee structure — checked
- 4.BONKbot docs — Signer — checked
- 5.BONKbot docs — wallet security and 2FA (key management) — checked
Frequently asked questions
Why does BonkBot score 6.8?
It averages five equal marks: 8 each for pricing, custody and entity transparency, 7 for security posture and 3 for venue coverage.
Why did the score rise from 5.4?
The terms now name the operator, Triple Spice AG in Zug, confirmed in the Swiss register, lifting entity from 2 to 8. The docs detail the key-management hardware and 2FA, lifting security from 6 to 7 on the category's count-of-controls scale.
What holds BonkBot back?
Mainly that it trades on Solana only. No external audit or bug bounty for its signing system is named, and the key is held on the service's servers.
Who is BonkBot's rating useful for?
Solana traders who want a published per-trade fee and documented key controls, and who keep only trading balances in the bot wallet.
How does BonkBot compare with Trojan and Banana Gun?
It scores above both: 6.8 against 5.2 for Trojan and 5.0 for Banana Gun. It names its operator and documents key handling, which neither does to the same degree; both score higher on venue coverage.
Nothing here is financial advice. Editorial policy · How we score · How we're funded.