This is wild

someone apparently found a Telegram bug and used it for almost two months to extract about $4.5M worth of Stars

($1.5M of that may already have been withdrawn)

the bug was about bot payments with gift refunds

after buying something and getting a refund, some Stars stayed on the account

the guy repeated the same operations several times, staking up stars

he then used those stars to buy extremely rare gifts (NFTs on TON blockchain)

Telegram has since blocked related gift transfers

Holy bug

🄳🄾🄾🄼🄿🤖🅂🅃🄸🄽🄶