Telegram trading tool Unibot suffers exploit

Blockchain security firms noted that the funds stolen from Unibot were transferred to the privacy tool Tornado Cash in laundering attempt

article-image

Parilov/Shutterstock, modified by Blockworks

share

Unibot, a well-known Telegram bot for Uniswap trading, suffered an approval vulnerability on Tuesday, resulting in a loss of tokens valued above $600,000.

A newly deployed contract was compromised, leading to the loss of several meme coins belonging to users. 

The firm pinpointed the problem as a “token approval exploit” from its new router, which led them to momentarily halt the router to address the issue.

“We experienced a token approval exploit from our new router and have paused our router to contain the issue,” the team said on X.

“Any funds lost due to the bug on our new router will be compensated. Your keys and wallets are safe.”

PeckShield initially detected the exploit, revealing that the attacker transferred the stolen tokens to Uniswap and moved the funds to crypto mixer Tornado Cash. 

The attacker appears to have exchanged the tokens for about 355.75 ETH, equal to around $640,000, according to the blockchain security firm. 

Meanwhile, analytics firm Scopescan pegged the size of the exploit at $560,000. 

While inquiries continue, Scopescan and Beosin recommended that impacted users revoke permissions for the compromised contract and move their assets to a safer wallet.

SlowMist, another security firm, stated that the attack was a result of missing essential parameter verifications, allowing the attacker to move tokens that users had authorized for the Unibot contract.

The UNIBOT token was last down nearly 30% at $44.01 as of 5:20 a.m. ET on Monday, data from Blockworks Research showed.

The team expects to provide a detailed update once the investigation is complete, with a Telegram admin mentioning a potential update in the upcoming 24 hours.


Get the news in your inbox. Explore Blockworks newsletters:

  • Blockworks Daily: The newsletter that helps thousands of investors understand crypto and the markets, by Byron Gilliam.
  • Empire: Start your morning with the top news and analysis to inform your day in crypto.
  • Forward Guidance: Reporting and analysis on the growing intersection of crypto and macroeconomics, policy and finance.
  • 0xResearch: Alpha directly in your inbox. Market highlights, data, degen trade ideas, governance updates, token performance and more.
  • Lightspeed: Built for Solana investors, developers and community members. The latest from one of crypto’s hottest networks.
  • The Drop: For crypto collectors and traders, covering apps, games, memes and more.
Tags

Upcoming Events

Industry City | Brooklyn, NY

TUES - THURS, JUNE 24 - 26, 2025

Permissionless IV serves as the definitive gathering for crypto’s technical founders, developers, and builders to come together and create the future.If you’re ready to shape the future of crypto, Permissionless IV is where it happens.

Old Billingsgate

Mon - Wed, October 13 - 15, 2025

Blockworks’ Digital Asset Summit (DAS) will feature conversations between the builders, allocators, and legislators who will shape the trajectory of the digital asset ecosystem in the US and abroad.

recent research

Research

article-image

Coinbase Asset Management and One River CEO Eric Peters explains why crypto’s not yet focused on fundamentals

article-image

Over the past 24 hours, PumpSwap’s largest liquidity pool by volume contains tokens with the tickers DOGEMOON and ballscoin

article-image

10T Holdings’ Dan Tapiero predicts crypto listings on exchanges are a “mini step” for value moving onchain

article-image

The S&P 500 was mostly flat after a month of losses, and the Nasdaq has been slowly gaining

article-image

Movement Labs is once again at the core of some criticism after it declined to name a market maker offboarded by Binance

article-image

Experts discuss the future of crypto ETFs as Trump puts “money where his mouth is”