Telegram trading tool Unibot suffers exploit

Blockchain security firms noted that the funds stolen from Unibot were transferred to the privacy tool Tornado Cash in laundering attempt

article-image

Parilov/Shutterstock, modified by Blockworks

share

Unibot, a well-known Telegram bot for Uniswap trading, suffered an approval vulnerability on Tuesday, resulting in a loss of tokens valued above $600,000.

A newly deployed contract was compromised, leading to the loss of several meme coins belonging to users. 

The firm pinpointed the problem as a “token approval exploit” from its new router, which led them to momentarily halt the router to address the issue.

“We experienced a token approval exploit from our new router and have paused our router to contain the issue,” the team said on X.

“Any funds lost due to the bug on our new router will be compensated. Your keys and wallets are safe.”

PeckShield initially detected the exploit, revealing that the attacker transferred the stolen tokens to Uniswap and moved the funds to crypto mixer Tornado Cash. 

The attacker appears to have exchanged the tokens for about 355.75 ETH, equal to around $640,000, according to the blockchain security firm. 

Meanwhile, analytics firm Scopescan pegged the size of the exploit at $560,000. 

While inquiries continue, Scopescan and Beosin recommended that impacted users revoke permissions for the compromised contract and move their assets to a safer wallet.

SlowMist, another security firm, stated that the attack was a result of missing essential parameter verifications, allowing the attacker to move tokens that users had authorized for the Unibot contract.

The UNIBOT token was last down nearly 30% at $44.01 as of 5:20 a.m. ET on Monday, data from Blockworks Research showed.

The team expects to provide a detailed update once the investigation is complete, with a Telegram admin mentioning a potential update in the upcoming 24 hours.


Start your day with top crypto insights from David Canellis and Katherine Ross. Subscribe to the Empire newsletter.

The Lightspeed newsletter is all things Solana, in your inbox, every day. Subscribe to daily Solana news from Jack Kubinec and Jeff Albus.

Tags

Upcoming Events

Salt Lake City, UT

WED - FRI, OCTOBER 9 - 11, 2024

Pack your bags, anon — we’re heading west! Join us in the beautiful Salt Lake City for the third installment of Permissionless. Come for the alpha, stay for the fresh air. Permissionless III promises unforgettable panels, killer networking opportunities, and mountains […]

recent research

Screenshot 2024-05-23 091855.png

Research

Bitcoin L2s aim to boost scalability while preserving decentralization and security, unlocking a better user experience, and new avenues for Bitcoin-powered innovations. However, no existing Bitcoin L2 leverages the full security of Bitcoin.

article-image

In November, an iteration of the survey found that 34% of respondents were paying attention to crypto, but that figure has since jumped to 41%

article-image

The sentencing of former FTX exec Ryan Salame is the first among those who pleaded guilty to crimes related to the exchange’s collapse

article-image

BlackRock’s iShares Bitcoin Trust is on the cusp of passing Grayscale’s GBTC in assets under management

article-image

Sponsored

The convergence of AI and blockchain on Polkadot represents a groundbreaking opportunity for investors and developers alike

article-image

The company is making public a previously private offer rejected by Bitfarms’ board of directors last month

article-image

Semler Scientific, a publicly traded medical tech company, joined MicroStrategy by buying up millions of bitcoin