Unibot Hack

Reported loss $673K
Ethereum
Token approval exploit

What happened

UniBot trading terminal exploited on Ethereum chain, leading to a loss of 673,317 USD (355.5 ETH) due to a token approval issue.

UniBot, a Crypto Trading Terminal running on the Ethereum chain, was exploited on October 31, 2023, due to a token approval issue. The exploit was related to trades made against a newly deployed router contract that was vulnerable. Approximately 600 wallets were affected by the exploit, resulting in a total loss of around 673,317 USD (355.5 ETH).

Attacker Address:

Address 0x413e…4d04

Malicious Transaction:

Tx 0xa571…b6a7

Malicious Contract Address:

Address 0x2b32…1a6f

Tornado Cash Deposit Transaction:

Tx 0x3050…e308

Protocol details

Classification Protocol Logic / Other / Exchange (DEX) / Access Control
Protocol Type Telegram Bot
Affected asset / contract UNIBOT
Implementation language Solidity
Protocol links Website @TeamUnibot

Understand the attack patterns

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.