Ethereum

Uniswap

Tornado Cash

Tornado

The Unibot hacker has moved $630,000 of the stolen funds from the popular Telegram trading bot through the <a href="https://cryptoslate.com/north-korean-hackers-have-abandoned-tornado-cash-for-bitcoin-mixers-trm-labs/" rel="noopener noreferrer nofollow">sanctioned mixing protocol</a> Tornado Cash, on-chain data shows.
In an Oct. 31 <a href="https://x.com/TeamUnibot/status/1719239188514844735?s=20" rel="noopener noreferrer nofollow">post</a> on X(formerly Twitter), the Unibot team confirmed that the platform suffered a “token approval exploit” on its new router.
<blockquote>
 “We experienced a token approval exploit from our new router and have paused our router to contain the issue,” Unibot said.
</blockquote>
The hack resulted in Unibot’s native <a href="https://cryptoslate.com/coins/unibot/" rel="noopener noreferrer nofollow">UNIBOT</a> token tanking by more than 30% to as low as $32.94 before recovering to $46.02 as of press time, according to CryptoSlate’s data.
<h2 id="how-unibot-was-exploited">How Unibot was exploited</h2>
While the trading bot team failed to provide information about the amount stolen, reports from crypto security firm Cyvers Alerts <a href="https://twitter.com/CyversAlerts/status/1719248410144837964" rel="noopener noreferrer nofollow">estimated</a> that the hacker took around 345 Ethereum (<a href="https://cryptoslate.com/coins/ethereum/" rel="noopener noreferrer nofollow">ETH</a>), equivalent to $630,000, from the platform.
Cyvers Alerts said the attacker was funded via Fixed Float and that:
<blockquote>
 “The root cause [of the hack] appears to be the absence of input for the ‘transferFrom’ function to transfer tokens that have been granted approval to the contract.”
</blockquote>
However, the Unibot team has tried to downplay the effect of the incident, assuring victims that they will be compensated and that their “keys and wallets are safe.”
“We will release a detailed response after investigations conclude,” Unibot added.
<h2 class="s3" id="span-class-s2-fund-movement-span">Fund movement</h2>
<a href="https://debank.com/profile/0x413e4fb75c300b92fec12d7c44e4c0b4faab4d04/history" rel="noopener noreferrer nofollow">Data</a> from Debank shows that the wallet associated with Unibot exploiter first exchanged all of the stolen digital assets, including meme coins, for Ethereum via decentralized exchange platforms like <a href="https://cryptoslate.com/products/uniswap/" rel="noopener noreferrer nofollow">Uniswap</a> and <a href="https://cryptoslate.com/companies/1inch-network/" rel="noopener noreferrer nofollow">1inch</a>.
Subsequently, the attacker then transferred all of these ETH via Tornado Cash in an attempt to obfuscate his transaction trail.
The wallet only has about $69 worth of digital assets left in its holding as of press time.
The post <a rel="noopener noreferrer nofollow" href="https://cryptoslate.com/unibot-hacker-moves-630000-of-stolen-funds-through-tornado-cash/">Unibot hacker moves $630,000 of stolen funds through Tornado Cash</a> appeared first on <a rel="noopener noreferrer nofollow" href="https://cryptoslate.com">CryptoSlate</a>.

Unibot hacker moves $630,000 of stolen funds through Tornado Cash

Table of Contents

CryptoSlate

Other articles published on Oct 31, 2023

Dogecoin Breakout Postponed, Elite Analyst Explains Why DOGE Will Have a Complicated Week

DOGE dan SHIB Koreksi Sebelum Lanjut Reli?

OKX Releases Latest Reserve Certificate Showing 103% BTC Backing

🗒 Daily Newsletter | Tuesday, October 31th, 2023

NEOM and Animoca Brands Forge Alliance to Propel Web3 Development in Saudi Arabia

dYdX Foundation Launches Open-sourced Bridge User Interface Software

Join our free newsletter for daily crypto updates!