Amid ongoing investigations from Unibot and blockchain investigators, Scopescan advised users to revoke the approvals for the exploited contract and move the funds to a new wallet.
4083 Total views
26 Total shares
A new contract deployed on Oct. 29 by Unibot, a popular Telegram bot used to snipe trades on the decentralized exchange Uniswap, was reportedly exploited for roughly $560,000 in various memecoins from users.
On Oct. 31, blockchain analytics firm Scopescan alerted Unibot users about an ongoing hack on Unibot that went undetected. An exploit on a newly deployed contract by Unibot drained the crypto holdings of several users.
— Scopescan ( . ) (@0xScopescan) October 31, 2023
Unibot later confirmed the hack by revealing initial details:
“We experienced a token approval exploit from our new router and have paused our router to contain the issue.”
Amid ongoing investigations from Unibot and blockchain investigators, Scopescan advised users to revoke the approvals for the exploited contract (0x126c9FbaB3A2FCA24eDfd17322E71a5e36E91865) and move the funds to a new wallet.
The hacker is in the process of converting the stolen memecoins into Ether (ETH), blockchain data from Scopescan shows.
As seen above, the market reacted negatively to the development as the UNIBOT token witnessed an immediate 42.7% drop in its price in one hour — from $57.56 to $32.94. However, the token’s price is making a recovery attempt at the time of writing.
— Unibot (@TeamUnibot) October 31, 2023We experienced a token approval exploit from our new router and have paused our router to contain the issue.
Any funds lost due to the bug on our new router will be compensated. Your keys and wallets are safe.
We will release a detailed response after investigations conclude.
Unibot committed to compensating all users who lost funds due to the contract exploit. Weekly transaction data shows that cryptocurrencies such as Joe (JOE), UNIBOT and BeerusCat (BCAT) represented a major part of the loot.
Cointelegraph also learned from Scopescan that the address 0x835B, which is identical to the exploited address, was deployed and is being used to receive tokens from unsuspecting victims.
Unibot has not yet responded to Cointelegraph’s request for comment.
Related: Telegram crypto bots gain momentum in the market: Binance Research
A similar contract exploit recently drained 280 ETH from users of Maestrobots, a group of cryptocurrency bots on the Telegram Messenger app.
In the following days, Maestrobots paid a total of 610 ETH from its own revenue to cover all the user losses while citing a lack of liquidity to buy back the lost tokens:
“So we compensated affected users with the ETH equivalent of their tokens, and boosted that amount by 20% because you deserve it. These refunds cost 334 ETH.”
Blockchain security firm CertiK confirmed to Cointelegraph that it has been able to detect the transactions showing the 334 ETH compensation paid out to users from Maestro.
Magazine: Ethereum restaking: Blockchain innovation or dangerous house of cards?
Author: Cassandra Burton
Last Updated: 1699913521
Views: 970
Rating: 4 / 5 (73 voted)
Reviews: 84% of readers found this page helpful
Name: Cassandra Burton
Birthday: 1921-06-18
Address: 31406 Keith Springs Suite 301, Port Lindaside, SD 97414
Phone: +3810067822792997
Job: Article Writer
Hobby: Photography, Poker, Amateur Radio, Sewing, Geocaching, Surfing, Raspberry Pi
Introduction: My name is Cassandra Burton, I am a apt, welcoming, daring, spirited, Adventurous, steadfast, cherished person who loves writing and wants to share my knowledge and understanding with you.