Uniswap

Banana

<p>Unibot, a Telegram-based crypto trading bot, has been exploited due to a suspected hacking incident. Users have been rushing to withdraw their funds from the platform, which specializes in connecting wallets to the decentralized exchange Uniswap and allowing users to execute token trades using Telegram-based tools.&nbsp;</p>
<p><a href="https://etherscan.io/address/0x413e4fb75c300b92fec12d7c44e4c0b4faab4d04" rel="noopener noreferrer nofollow" target="_blank">Etherscan data </a>indicates that an exploiter has been moving users’ cryptocurrencies and exchanging them for Ethereum (ETH).</p>
<p>One week after Unibot was launched, the exploiter received 1 ETH as gas fee from FixedFloat coin mixer, as <a href="https://twitter.com/0xscopescan/status/1719225246480527706?s=61&amp;t=i8ABFwMwGrxXfHHnY6ElvQ" rel="noopener noreferrer nofollow" target="_blank">revealed</a> by Scopescan. Analytics firm Lookonchain has <a href="https://twitter.com/lookonchain/status/1719233194220999089?s=61&amp;t=vUAAARoiNQdLuoVQPrno2A" rel="noopener noreferrer nofollow" target="_blank">reported</a> that the exploiter has already pilfered over $600,000. Moreover, cybersecurity entity Beosin Alert has identified the root cause of the breach as a Call injection. This vulnerability enabled the attacker to insert custom malicious calldata into a specific method, thereby transferring tokens approved to Unibot contracts.</p>
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">🚨<a href="https://twitter.com/hashtag/Unibot?src=hash&amp;ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow" target="_blank">#Unibot</a> exploited🚨 <br>Hacker:<a href="https://t.co/vSnl9xNmBD" rel="noopener noreferrer nofollow" target="_blank">https://t.co/vSnl9xNmBD</a><br><br>The root cause is CAll injection, where an attacker can pass custom malicious calldata into the 0xb2bd16ab() method to transfer tokens approved to Unibot contracts.<br><br>Users need to revoke approval for… <a href="https://t.co/7PYJVwO6Ga" rel="noopener noreferrer nofollow" target="_blank">pic.twitter.com/7PYJVwO6Ga</a></p>— Beosin Alert (@BeosinAlert) <a href="https://twitter.com/BeosinAlert/status/1719230693782507993?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow" target="_blank">October 31, 2023</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
 </div>
</figure>
<h2 class="wp-block-heading" id="unibot-token-price-plummets">Unibot token price plummets</h2>
<p>The immediate financial aftermath of the security lapse has been severe. The Unibot token price plummeted by 25.0% in one hour after the hack, trading at $42.42 at the time of this report, according to data from Coingecko.</p>
<figure class="wp-block-image size-large"><img decoding="async" fetchpriority="high" width="1200" height="630" src="https://img.cryptopolitan.com/wp-content/uploads/2023/10/Screenshot-2023-10-31-at-8.58.29-AM-2-1200x630.png?strip=all&amp;lossy=1&amp;quality=90&amp;webp=90&amp;sharp=1&amp;ssl=1" alt="" class="wp-image-395575" srcset="https://img.cryptopolitan.com/wp-content/uploads/2023/10/Screenshot-2023-10-31-at-8.58.29-AM-2-1200x630.png?strip=all&amp;lossy=1&amp;quality=90&amp;webp=90&amp;sharp=1&amp;ssl=1 1200w, https://img.cryptopolitan.com/wp-content/uploads/2023/10/Screenshot-2023-10-31-at-8.58.29-AM-2-300x158.png?strip=all&amp;lossy=1&amp;quality=90&amp;webp=90&amp;sharp=1&amp;ssl=1 300w, https://img.cryptopolitan.com/wp-content/uploads/2023/10/Screenshot-2023-10-31-at-8.58.29-AM-2-768x403.png?strip=all&amp;lossy=1&amp;quality=90&amp;webp=90&amp;sharp=1&amp;ssl=1 768w, https://img.cryptopolitan.com/wp-content/uploads/2023/10/Screenshot-2023-10-31-at-8.58.29-AM-2-500x263.png?strip=all&amp;lossy=1&amp;quality=90&amp;webp=90&amp;sharp=1&amp;ssl=1 500w, https://img.cryptopolitan.com/wp-content/uploads/2023/10/Screenshot-2023-10-31-at-8.58.29-AM-2.png?strip=all&amp;lossy=1&amp;quality=90&amp;webp=90&amp;sharp=1&amp;ssl=1 1782w, https://img.cryptopolitan.com/wp-content/uploads/2023/10/Screenshot-2023-10-31-at-8.58.29-AM-2.png?strip=all&amp;lossy=1&amp;quality=90&amp;webp=90&amp;sharp=1&amp;w=560&amp;ssl=1 560w, https://img.cryptopolitan.com/wp-content/uploads/2023/10/Screenshot-2023-10-31-at-8.58.29-AM-2.png?strip=all&amp;lossy=1&amp;quality=90&amp;webp=90&amp;sharp=1&amp;w=840&amp;ssl=1 840w, https://img.cryptopolitan.com/wp-content/uploads/2023/10/Screenshot-2023-10-31-at-8.58.29-AM-2.png?strip=all&amp;lossy=1&amp;quality=90&amp;webp=90&amp;sharp=1&amp;w=1120&amp;ssl=1 1120w, https://img.cryptopolitan.com/wp-content/uploads/2023/10/Screenshot-2023-10-31-at-8.58.29-AM-2.png?strip=all&amp;lossy=1&amp;quality=90&amp;webp=90&amp;sharp=1&amp;w=1400&amp;ssl=1 1400w" sizes="(max-width: 1200px) 100vw, 1200px">
 <figcaption class="wp-element-caption"><em>UNIBOT/USD chart. Source: CoinGecko.</em>
 </figcaption>
</figure>
<p>The platform’s team confirmed the exploit on X (Twitter). They attributed the security lapse to a token approval exploit in their new router, which has now been paused to contain further damage. Additionally, the team assured users that compensation would be provided for any lost funds. Importantly, they stressed that users’ keys and wallets were not compromised.</p>
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">We experienced a token approval exploit from our new router and have paused our router to contain the issue.<br><br>Any funds lost due to the bug on our new router will be compensated. Your keys and wallets are safe.<br><br>We will release a detailed response after investigations conclude.</p>— Unibot (@TeamUnibot) <a href="https://twitter.com/TeamUnibot/status/1719239188514844735?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow" target="_blank">October 31, 2023</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
 </div>
</figure>
<p>In a similar vein, Unibot declared that it would reimburse any purloined funds. Consequently, the team paused the router’s operation to mitigate the issue. They reiterated the security of users’ keys and wallets, aiming to assuage concerns.</p>
<p>Significantly, this Unibot incident is the latest in a series of exploits that have plagued the crypto trading bot space, especially those operating on Telegram. Notably, last week, Maestro, a leading Telegram trading bot at the time, suffered a hacking incident that resulted in a loss of $500,000. Affected users were later reimbursed. Also, in September, Banana Gun, another top bot, saw its native token crash by 98% in a single day due to a smart contract glitch.</p>
<p>In light of these events, crypto trading bot users are urged to exercise caution. The growing incidents of security lapses underscore the risks involved in relinquishing control over private keys to trading bots. However, it remains to be seen how Unibot will shore up its defenses to regain user trust and prevent future mishaps.</p>

Telegram-based crypto trading platform Unibot suffers security breach; over $600,000 lost

Table of Contents

Cryptopolitan_News

Other articles published on Oct 31, 2023

Grayscale Bitcoin ETF Filing Back in the SEC’s Radar for November 2nd Decision!

Coinbase-backed group raises $2m from crypto supporters

Matrix AI CEO Answered questions from the community! - October 2023 AMA

Rising optimism fuels unprecedented inflows in Crypto market

Ripple CEO Brad Garlinghouse Lambasts Former SEC Chair’s Regulatory Approach

Valkyrie Investments Makes Significant Update to Bitcoin ETF Application

Join our free newsletter for daily crypto updates!