Unibot Hack

TOTAL LOST $673K
Low Access Control Attacks ethereum

What happened

Quick Summary

UniBot trading terminal exploited on Ethereum chain, leading to a loss of 673,317 USD (355.5 ETH) due to a token approval issue.

Details of the Exploit

UniBot, a Crypto Trading Terminal running on the Ethereum chain, was exploited on October 31, 2023, due to a token approval issue. The exploit was related to trades made against a newly deployed router contract that was vulnerable. Approximately 600 wallets were affected by the exploit, resulting in a total loss of around 673,317 USD (355.5 ETH).

Block Data Reference

Attacker Address:

https://etherscan.io/address/0x413e4Fb7…AB4d04

Malicious Transaction:

https://etherscan.io/tx/0xa571419f…59b6a7

Malicious Contract Address:

https://etherscan.io/address/0x2b326a17…231a6f

Tornado Cash Deposit Transaction:

https://etherscan.io/tx/0x30508db6…22e308

Case & protocol details

Classification Protocol Logic / Other / Exchange (DEX) / Access Control
Protocol Type Telegram Bot
Affected asset / contract UNIBOT
Smart Contract Language Solidity
Official Website unibot.app/home
Protocol Twitter/X @TeamUnibot

Evidence & learning

Attack pattern

Compare incidents →
Access Control Attacks

Proof of concept

1 available

Sources and on-chain records

Practice this exploit pattern safely

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.

Start Free Trial Explore attack classes