On January 13, 2026, Polycule officially confirmed that its Telegram trading bot was hacked, resulting in approximately $230,000 in user assets being compromised. With the bot going offline and compensation promises being announced, the incident quickly sparked industry-wide discussions on the security of Telegram Trading Bots. Examining Polycule's functional structure and design logic reveals that this was not an isolated failure, but rather the concentrated eruption of long-standing yet underestimated security risks inherent in the trading bot model.