Telegram trading tool Unibot suffers exploit

Blockchain security firms noted that the funds stolen from Unibot were transferred to the privacy tool Tornado Cash in laundering attempt

article-image

Parilov/Shutterstock, modified by Blockworks

share

Unibot, a well-known Telegram bot for Uniswap trading, suffered an approval vulnerability on Tuesday, resulting in a loss of tokens valued above $600,000.

A newly deployed contract was compromised, leading to the loss of several meme coins belonging to users. 

The firm pinpointed the problem as a “token approval exploit” from its new router, which led them to momentarily halt the router to address the issue.

“We experienced a token approval exploit from our new router and have paused our router to contain the issue,” the team said on X.

“Any funds lost due to the bug on our new router will be compensated. Your keys and wallets are safe.”

PeckShield initially detected the exploit, revealing that the attacker transferred the stolen tokens to Uniswap and moved the funds to crypto mixer Tornado Cash. 

The attacker appears to have exchanged the tokens for about 355.75 ETH, equal to around $640,000, according to the blockchain security firm. 

Meanwhile, analytics firm Scopescan pegged the size of the exploit at $560,000. 

While inquiries continue, Scopescan and Beosin recommended that impacted users revoke permissions for the compromised contract and move their assets to a safer wallet.

SlowMist, another security firm, stated that the attack was a result of missing essential parameter verifications, allowing the attacker to move tokens that users had authorized for the Unibot contract.

The UNIBOT token was last down nearly 30% at $44.01 as of 5:20 a.m. ET on Monday, data from Blockworks Research showed.

The team expects to provide a detailed update once the investigation is complete, with a Telegram admin mentioning a potential update in the upcoming 24 hours.


Get the news in your inbox. Explore Blockworks newsletters:

Tags

Decoding crypto and the markets. Daily, with Byron Gilliam.

Upcoming Events

Old Billingsgate

Mon - Wed, October 13 - 15, 2025

Blockworks’ Digital Asset Summit (DAS) will feature conversations between the builders, allocators, and legislators who will shape the trajectory of the digital asset ecosystem in the US and abroad.

Industry City | Brooklyn, NY

TUES - THURS, JUNE 24 - 26, 2025

Permissionless IV serves as the definitive gathering for crypto’s technical founders, developers, and builders to come together and create the future.If you’re ready to shape the future of crypto, Permissionless IV is where it happens.

Brooklyn, NY

SUN - MON, JUN. 22 - 23, 2025

Blockworks and Cracked Labs are teaming up for the third installment of the Permissionless Hackathon, happening June 22–23, 2025 in Brooklyn, NY. This is a 36-hour IRL builder sprint where developers, designers, and creatives ship real projects solving real problems across […]

recent research

Nillion_DeSci_Report_Template.png

Research

Nillion’s Monad Integration is poised to catalyze the next phase of DeSci’s evolution by eliminating key privacy bottlenecks. This synergy allows researchers, institutions, and DAOs to exchange sensitive data and insights securely while managing governance and payments onchain.

article-image

Time and competition will push Vanguard to eventually update its “antiquated, 2013-era view of bitcoin,” Bitwise CIO says

article-image

Halliday CEO Griffin Dunaif said that there may be smaller margins on stablecoins, but lots of potential in the services around them

article-image

Discounted cash flow is as close as you can get to a fundamental truth in the art of financial valuation

article-image

Solana’s focus remains on fundamentals: stable usage, high yields, and expanding infrastructure

article-image

While new XRP futures ETFs are set to launch, the SEC could wait several months to greenlight more spot offerings