Unibot hacker moves $630,000 of stolen funds through Tornado Cash

The Unibot hacker has moved $630,000 of the stolen funds from the fashionable Telegram trading bot done the sanctioned mixing protocol Tornado Cash, on-chain information shows.

In an Oct. 31 post connected X(formerly Twitter), the Unibot squad confirmed that the level suffered a “token support exploit” connected its caller router.

“We experienced a token support exploit from our caller router and person paused our router to incorporate the issue,” Unibot said.

The hack resulted successful Unibot’s autochthonal UNIBOT token tanking by much than 30% to arsenic debased arsenic $32.94 earlier recovering to $46.02 arsenic of property time, according to CryptoSlate’s data.

How Unibot was exploited

While the trading bot squad failed to supply accusation astir the magnitude stolen, reports from crypto information steadfast Cyvers Alerts estimated that the hacker took astir 345 Ethereum (ETH), equivalent to $630,000, from the platform.

Cyvers Alerts said the attacker was funded via Fixed Float and that:

“The basal origin [of the hack] appears to beryllium the lack of input for the ‘transferFrom’ relation to transportation tokens that person been granted support to the contract.”

However, the Unibot squad has tried to downplay the effect of the incident, assuring victims that they volition beryllium compensated and that their “keys and wallets are safe.”

“We volition merchandise a elaborate effect aft investigations conclude,” Unibot added.

Fund movement

Data from Debank shows that the wallet associated with Unibot exploiter archetypal exchanged each of the stolen integer assets, including meme coins, for Ethereum via decentralized speech platforms similar Uniswap and 1inch.

Subsequently, the attacker past transferred each of these ETH via Tornado Cash successful an effort to obfuscate his transaction trail.

The wallet lone has astir $69 worthy of integer assets near successful its holding arsenic of property time.

The station Unibot hacker moves $630,000 of stolen funds done Tornado Cash appeared archetypal connected CryptoSlate.