Crypto News– Recent data indicates that Team Unibot, a trading bot designed to streamline token trading on Uniswap V3 through Telegram apps for DeFi enthusiasts, has fallen victim to exploitation. This breach has resulted in the transfer of meme coins from Unibot users’ accounts, which were subsequently exchanged for Ethereum (ETH) at the time of this writing. Remarkably, the cumulative value of the tokens exploited stands at a significant $560,000. The wallet address responsible for these transfers, identified as 0x413e4fb75c300b92fec12d7c44e4c0b4faab4d04, currently holds a total balance of $583,762. Furthermore, it’s worth noting that this wallet address has remained relatively inactive for the most part, with a sudden surge in transfers recorded on October 31, 2023.
Unibot Security Breach Results in Hacker Trading 560,000 Dollars Tokens for Ethereum (ETH)
Following the reports of this security breach, the price of UNIBOT, the cryptocurrency trading bot’s native token, experienced a sharp decline, plummeting by more than 40%.
According to a Beosin Alert, the root cause of this hack can be attributed to a CALL injection vulnerability. This flaw enabled the attacker to send malicious call data to the 0xb2bd16ab() method, effectively granting access to tokens approved within Unibot contracts.
Unibot Releases Important User Advisory
Unibot recently issued a statement addressing a token approval exploit discovered within their new router, resulting in the suspension of its usage. The decision to halt the router’s operations was made to mitigate any further damage.
Furthermore, Unibot has committed to compensating any funds that were lost as a result of vulnerabilities in the new router. They reassured users that their remaining keys and wallets remain completely secure. A comprehensive report will be made available once the ongoing investigation is concluded.
Unibot is advising its users to take prompt action by reviewing and revoking any approvals associated with the contract 0x126c9FbaB3A2FCA24eDfd17322E71a5e36E91865 and transferring their funds to new wallets as soon as possible.
As of the time of writing, it has come to light that the exploiter’s contract was deployed by the Unibot team just two days prior. Additionally, the exploiter had received funding approximately five months ago, shortly after Unibot’s launch, from fixfloat, a cryptocurrency mixer.
1 Comment