Hack history / 2023 / Hack or exploit
Unibot
Hack or exploit on Oct 31, 2023 · Token Approval Abuse
SOURCES AGREE ON DATE AND LOSS · 3 SOURCES
Lost
$640K
sources: $560K to $640K
Returned
none listed
as the sources state it
Rank
#1,072
among thefts by dollars lost
What happened
On October 31, 2023, Unibot's newly-deployed unverified router contract contained a call injection vulnerability allowing attackers to insert arbitrary transferFrom() calls and drain $640,000 in approved tokens from user wallets. The stolen funds were moved to Uniswap then Tornado Cash.
Details
- Date
- Oct 31, 2023
- Kind
- Hack or exploit
- Method
- Token Approval Abuse
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- Ethereum
- Audit (rekt.news)
- unaudited
Reported by
Related incidents
MetaPoint 2023 · Hack or exploit · $820K
Hector Lending 2023 · Hack or exploit · $653K
Hashflow 2023 · Hack or exploit · $605K
CivFund 2023 · Hack or exploit · $180K
Ara Finance 2023 · Hack or exploit · $125K
Hector Lending 2023 · Hack or exploit · $653K
Hashflow 2023 · Hack or exploit · $605K
CivFund 2023 · Hack or exploit · $180K
Ara Finance 2023 · Hack or exploit · $125K
Cite this page
SwanBluechip, "Unibot hack, Oct 31, 2023: $640K lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht1526925e03/ (data as of 2026-10-31).