“The Unibot exploit underscores the ever-present vulnerabilities in the crypto space, even among tools designed to help traders.”
Unibot, a popular Telegram bot specialising in rapid-fire trades on the decentralised Uniswap exchange, fell victim to a contract exploit.
Imagine if you had a vault and someone managed to find the blueprint to its security mechanisms. The perpetrator then used that knowledge to unlock the vault without anyone noticing. That's akin to what happened here. An exploit is a loophole in a contract's code that a hacker can manipulate to steal assets.
Unibot broke its silence about the hack, stating,
"We experienced a token approval exploit from our new router and have paused our router to contain the issue."
In light of this breach, Scopescan, a blockchain security firm, issued warnings to Unibot users. They recommended revoking any authorisations linked to the compromised contract and swiftly moving funds to a new digital wallet.
To put it simply, the hacker is now in the process of laundering the stolen assets. They're converting these 'memecoins' into Ether, a more stable and widely-accepted form of cryptocurrency, according to Scopescan's blockchain data.
Unibot hacker moving funds. Source: 0xscope.com
Unibot 1-day price chart showing a sharp decline in price following the hack. Source: CoinGecko
The aftermath of this cyber heist was immediate and severe. The UNIBOT token's price took a nosedive, plummeting by 42.7% in just one hour, from $57.56 to $32.94.
However, there's a glimmer of hope. The UNIBOT token is showing signs of price recovery.
The Recent Unibot Incident Serves As A Caution
In an effort to remedy the situation, Unibot has pledged to compensate all affected users. Weekly transaction data reveals that cryptocurrencies such as Joe (JOE), UNIBOT and BeerusCat (BCAT) made up a significant portion of the stolen assets.
Scopescan revealed further unsettling details. Another address, which closely resembles the exploited one, has been activated and is being used to lure in further victims.
Unibot has remained tight-lipped, not responding to requests for comment as of yet.
For context, this isn't an isolated incident. Another similar contract exploit recently drained 280 ETH from Maestrobots users. Maestrobots later used its own funds to reimburse users for their losses, an action Unibot has also committed to.
CertiK, another blockchain security firm, verified Maestrobots' payout of 334 ETH in compensation to its users.
Ethereum's DenCun upgrade leads to inflationary trend, challenging its previous deflationary narrative. Decreased burning rate and increased supply post-upgrade indicate shifting economic dynamics, prompting reassessment of Ethereum's role as "Ultrasound money."
Huang BoEthereum whale profits from year-long investment, making strategic moves amid market fluctuations, capitalizing on short-term gains.
Xu LinSEC delays verdict on Galaxy Invesco's Ethereum ETF proposal, affecting other applicants. Analysts split on approval chances.
Huang BoA cybercriminal behind the embezzlement of $7.4 million from Hundred Finance reappears, moving approximately $800,000 worth of assets to launder or utilise the stolen funds. Despite a recent decline in crypto scams and hacking incidents, challenges persist in securing cryptocurrency platforms and preventing financial crime.
WeatherlyHong Kong's Bitcoin and Ether ETFs launch saw a modest trading volume, indicating cautious investor sentiment amid regulatory concerns and market volatility. Despite the muted response, increased trading volume suggests growing interest, hinting at potential future market impact.
WeatherlyHong Kong is launching Asia's first spot Bitcoin and Ether ETFs, potentially establishing itself as a crypto hub in the region, though mainland Chinese investors are currently restricted. The move could trigger a ripple effect across Asia, encouraging other regulators to explore similar initiatives, potentially reshaping the regional crypto investment landscape.
WeatherlyHong Kong's approval of bitcoin and ether ETFs signals its growing role in cryptocurrency innovation, contrasting with China's stricter stance. While this move promises investment opportunities and financial growth, it also poses risks due to cryptocurrency volatility and regulatory uncertainties.
AnaisDonald Trump sees a noteworthy downturn in his cryptocurrency investments with his current crypto holdings valued at $5.3 million —a loss close to $3 million.
CatherineThe individual in question used illicitly obtained funds to acquire DeGods #2921 and y00t #10991.
KikyoDespite implementing security upgrades following a previous breach, FixedFloat emphasises that user funds remain secure and unaffected.
CatherineHack VC raises $150M for early-stage crypto and AI startups, focusing on DeFi, RWA tokenization, and security. Prioritizes Web3-AI intersection.
Xu LinThrough statistics and analysis of security incidents in the Web3.0 field over the past year, the latest trends in Web3.0 security are fully revealed.
JinseFinanceStablecoin issuers Circle and Tether have blacklisted over half of the stolen funds, according to available information.
BeincryptoMetis, an Ethereum layer-2 platform, warns users not to buy METIS on the BNB Blockchain days after the PolyNetwork was hacked and $5.5 million of assets stolen.
BitcoinistNorway completed its record-high crypto seizure, confiscating approximately $5.9 million worth of digital assets.
cryptopotatoThe community criticized the airdrop announced by the AllianceBlock team.
BeincryptoNorth Korea-linked cybercrime syndicate Lazarus Group has reportedly transferred $63.4 million in Ethereum from 2022’s mammoth Harmony bridge hack, depositing it on Binance, Huobi, and OKX.
decryptThe notorious North Korean hacker collective known as Lazarus has had a busy weekend moving millions of dollars in Ethereum.
cryptopotatoBabylon’s founder said several liquidity pools and BABL tokens price were severely impacted, which contributed to the decision.
Coindesk
Nulltx