Unibot hacker strikes $630,000 of stolen funds by way of Twister Money

The Unibot hacker has moved $630,000 of the stolen funds from the favored Telegram buying and selling bot by way of the sanctioned mixing protocol Twister Money, on-chain information exhibits.

In an Oct. 31 put up on X(previously Twitter), the Unibot workforce confirmed that the platform suffered a “token approval exploit” on its new router.

“We skilled a token approval exploit from our new router and have paused our router to comprise the difficulty,” Unibot stated.

The hack resulted in Unibot’s native UNIBOT token tanking by greater than 30% to as little as $32.94 earlier than recovering to $46.02 as of press time, in keeping with starcrypto’s information.

How Unibot was exploited

Whereas the buying and selling bot workforce failed to supply details about the quantity stolen, studies from crypto safety agency Cyvers Alerts estimated that the hacker took round 345 Ethereum (ETH), equal to $630,000, from the platform.

Cyvers Alerts stated the attacker was funded through Fastened Float and that:

“The foundation trigger [of the hack] seems to be the absence of enter for the ‘transferFrom’ perform to switch tokens which have been granted approval to the contract.”

Nevertheless, the Unibot workforce has tried to downplay the impact of the incident, assuring victims that they are going to be compensated and that their “keys and wallets are protected.”

“We’ll launch an in depth response after investigations conclude,” Unibot added.

Fund motion

Knowledge from Debank exhibits that the pockets related to Unibot exploiter first exchanged the entire stolen digital belongings, together with meme cash, for Ethereum through decentralized change platforms like Uniswap and 1inch.

Subsequently, the attacker then transferred all of those ETH through Twister Money in an try and obfuscate his transaction path.

The pockets solely has about $69 value of digital belongings left in its holding as of press time.