Telegram chatbot Unibot is grappling with the loss of approximately $640,000 worth of digital assets following an exploitation of a newly deployed contract by a hacker.
Recovery Efforts
The protocol's team is actively investigating the breach and intends to issue a comprehensive response in due course.
PeckShield reported that the attacker successfully transferred the stolen cryptocurrency to Uniswap, and from there, it was routed to the controversial crypto mixer, Tornado Cash.
Advised by Lookonchain, Unibot is swiftly taking steps to move funds to other wallets and revoke contract approvals.
Unibot has also confirmed the token approval exploit from its new router and has paused its operation to mitigate the issue.
In an effort to reassure its users, the protocol has pledged to compensate for any funds lost due to the bug on its new router.
They have emphasized that user keys and wallets remain secure.
The Ripple Effect Of The September Curse?
It's worth noting that September witnessed approximately $332 million in various digital assets falling prey to exploits, hacks, and scams, according to blockchain security firm CertiK.
Not looking too great after the September curse…
Bot Hacking Trend
This incident follows closely on the heels of an attack on Maestrobots, a group of cryptocurrency bots operating within the Telegram messenger app, on October 24th.
Attackers targeted MaestroRouter on the ETH mainnet and drained 280 ETH, equivalent to around $485,000 at the time of the breach.
The Maestrobots team promptly identified the attack and eliminated the exploit, with users receiving reimbursement a day later.