{"investigation":{"slug":"unibot","entity_name":"Unibot","trust_score":48,"severity_base":null,"score_modifier":16,"confidence":0.72,"status":"draft","content_type":"investigation","summary":"Unibot is a Telegram-based cryptocurrency trading bot launched in May 2023 that enables users to trade on Uniswap and other decentralized exchanges directly within Telegram. On October 31, 2023, Unibot suffered a smart contract router exploit in which approximately $560,000–$640,000 in user tokens were stolen by an external attacker; the team subsequently reimbursed affected users. The platform operates with an anonymous founding team and involves inherent custodial risks because the bot manages user wallet interactions.","sections":[{"content":"Unibot launched on the Ethereum mainnet on May 17, 2023 as a Telegram bot designed to facilitate fast token trading on Uniswap v2 and v3 without requiring users to connect an external wallet interface. The platform later expanded to additional EVM-compatible chains (Base, Arbitrum) and Solana, integrating with Jupiter and Orca for Solana-native swaps. The native token, UNIBOT, has a fixed supply of 1 million tokens and was distributed via a self-described fair launch in which 100% of the supply was added to liquidity at inception with no pre-mine or team allocation at launch. According to TokenInsight and price aggregator data, the two co-founders are identified only as 'Ayden,' described as a former Apple employee, and an unnamed partner from a Bay Area machine learning startup. The team is otherwise anonymous. As of August 2026, UNIBOT trades at approximately $0.70 with a market cap near $636,000, down sharply from its 2023 peak above $200.","heading":"Overview and Background","sources":[{"url":"https://crypto.com/us/university/what-is-unibot","name":"What Is Unibot (UNIBOT)? - Crypto.com University","type":"research","credibility":2},{"url":"https://tokeninsight.com/en/coins/unibot/team","name":"Unibot (UNIBOT) Team and Founder - TokenInsight","type":"research","credibility":2},{"url":"https://coinmarketcap.com/currencies/unibot-eth/","name":"UniBot price today, UNIBOT to USD live price - CoinMarketCap","type":"other","credibility":2}],"severity":"low"},{"content":"On October 31, 2023, Unibot suffered a smart contract exploit affecting a new router contract the team had deployed on October 28, 2023. The root cause was a call injection vulnerability: function 0xb2bd16ab lacked input validation, allowing an attacker to inject malicious calldata and invoke transferFrom on any token that users had pre-approved to the Unibot router contract. The attacker drained approximately 355.5 ETH worth of tokens — estimates of the USD value range from $560,000 to $640,000 across sources — before routing the stolen funds through Uniswap and then Tornado Cash. This was an external attack on Unibot's infrastructure; there is no evidence of insider involvement or intentional misconduct by the Unibot team. CertiK documented the same class of vulnerability affecting both Unibot and Maestro (a competing Telegram trading bot) within the same week, with a combined loss of approximately $1.1 million. The Unibot team paused the router, confirmed the exploit publicly within hours, and stated: 'Your keys and wallets are safe.' The team subsequently reimbursed all affected users. According to CryptotTimes and CryptoRank reporting, 86% of stolen tokens were reacquired at market value, and a full $370,000 refund was provided for Joe coin, a heavily impacted asset. The team also waived transaction fees for ten days and raised the revenue share rate from 2% to 3% for token holders. This incident should be classified as a suffered third-party hack, not fraud or insider theft.","heading":"October 2023 Router Exploit (Suffered Hack)","sources":[{"url":"https://www.theblock.co/post/260133/unibot-confirms-exploit-and-promises-compensation-as-token-price-plunges","name":"Unibot Confirms Exploit and Promises Compensation - The Block","type":"news_article","credibility":1},{"url":"https://decrypt.co/203795/unibot-telegram-bot-falls-prey-major-exploit-over-640k-crypto-lost","name":"Unibot Telegram Bot Falls Prey to Major Exploit Over $640k Lost - Decrypt","type":"news_article","credibility":1},{"url":"https://www.certik.com/resources/blog/1Zh5XbaDstXKteFcRSmOcp-maestro-and-unibot","name":"Maestro and Unibot Exploit Analysis - CertiK","type":"research","credibility":1},{"url":"https://blog.solidityscan.com/unibot-hack-analysis-b8a57a78796a","name":"Unibot Hack Analysis - SolidityScan","type":"research","credibility":2},{"url":"https://revoke.cash/exploits/unibot","name":"2023 Unibot Hack: Check If You're Affected - Revoke.cash","type":"other","credibility":2},{"url":"https://www.cryptotimes.io/2023/11/04/unibot-reimburses-users-following-recent-security-hack/","name":"Unibot Reimburses Users Following Recent Security Hack - CryptoTimes","type":"news_article","credibility":2},{"url":"https://chainbulletin.com/unibot-to-compensate-users-affected-by-exploit","name":"Unibot to Compensate Users Affected by Exploit - The Chain Bulletin","type":"news_article","credibility":2},{"url":"https://neptunemutual.com/blog/taking-a-closer-look-at-unibot-exploit/","name":"Taking a Closer Look at Unibot Exploit - Neptune Mutual","type":"research","credibility":2}],"severity":"high"},{"content":"Unibot operates as a custodial trading interface: users must either generate a wallet within the Telegram bot or import an existing private key into the bot environment. This means user private keys are handled by Unibot's server infrastructure rather than remaining under user-exclusive control, a structural risk inherent to all Telegram trading bots of this type. In August 2023, prior to the October hack, Unibot launched 'Unibot Cloud,' a service intended to move private key storage away from Telegram's platform and deliver keys via self-destructing messages. However, blockchain security firm CertiK raised concerns about this implementation, with CertiK director of security operations Hugh Brooks stating: 'The information does not clarify whether a third-party provider is involved, which could be a potential risk factor, such as susceptibility to supply chain attacks.' CertiK also noted insufficient information about the encryption methods used and the absence of official Unibot responses to user inquiries on these specifics. Users who transferred private keys from existing wallets into the bot environment face the standard risk profile associated with any custodial or semi-custodial service.","heading":"Custodial and Private Key Risks","sources":[{"url":"https://www.dlnews.com/articles/defi/unibot-telegram-bot-unveils-cloud-service-for-private-keys/","name":"Unibot Makes Changes to Thwart Private Key Thieves in $300m Telegram Bot Market - DL News","type":"news_article","credibility":2},{"url":"https://beosin.com/resources/unibot-exploited%E2%80%8A-%E2%80%8Aexamining-the-security-risks-of-telegram%C2%A0","name":"Unibot Exploited: Examining the Security Risks of Telegram Bots - Beosin","type":"research","credibility":2}],"severity":"medium"},{"content":"In March 2024, Unibot announced the termination of its collaboration with a third-party group that had been deploying Unibot on Solana. According to Unibot's public statement, the Solana group launched a product named 'evm_unibot' on the Blast network without prior authorization from Unibot, refused to undergo KYC, and failed to honor fee-sharing commitments. Unibot cited 'security concerns' and stated it would transition Solana operations to in-house development on its own server infrastructure. The announcement caused the UNIBOT token to decline approximately 33–45% within 24 hours. This incident reflects third-party partner misconduct rather than wrongdoing by the core Unibot team, though it highlights governance and partner-vetting weaknesses in the project's operational structure.","heading":"Solana Partnership Termination (March 2024)","sources":[{"url":"https://www.coindesk.com/markets/2024/03/11/unibot-tanks-33-after-ending-collaboration-with-solana-group","name":"Unibot Tanks 33% After Ending Collaboration With Solana Group - CoinDesk","type":"news_article","credibility":1},{"url":"https://blockchain.news/news/unibot-ends-partnership-with-solana-sol-team-cites-security-concerns","name":"Unibot Ends Partnership with Solana Team, Cites Security Concerns - Blockchain.news","type":"news_article","credibility":2},{"url":"https://fullycrypto.com/unibot-dumps-solana-over-unauthorized-bot-launch","name":"Unibot Dumps Solana Over Unauthorized Bot Launch - Fully Crypto","type":"news_article","credibility":2}],"severity":"medium"},{"content":"UNIBOT launched with a total supply of 1,000,000 tokens and a 0.1% daily burn rate. The project uses a self-described fair launch model in which 100% of the supply was added to liquidity at genesis, with no pre-mine disclosed. Each buy and sell transaction on the UNIBOT token incurs a 4% fee, split as follows: 2% to token holders, 1% to the UNIBOT liquidity pool, and 1% to the team and operating expenses. Token holders with a minimum of 10 UNIBOT tokens qualify for a revenue-sharing program distributing a percentage of bot trading fees. After the October 2023 exploit, Unibot increased the revenue share rate from 2% to 3% of bot fees as a remediation gesture. The project later migrated from a V1 to a V2 token contract; this migration was approved by a holder vote in the project's Telegram channel (reported as 81% in favor), rather than through a formal on-chain DAO governance mechanism. As of August 2026, the UNIBOT market cap is approximately $636,000 and 24-hour trading volume is approximately $2,000–$15,000, indicating severely reduced activity relative to the project's 2023 peak.","heading":"Tokenomics and Revenue Sharing","sources":[{"url":"https://learn.unibot.app/faq/unibot-token","name":"UNIBOT Token - Unibot Learn (official documentation)","type":"official","credibility":2},{"url":"https://medium.com/@uniboteth/unibot-v2-migration-tokenomics-upgrade-9b8635b344b1","name":"Unibot V2 Migration Tokenomics Upgrade - Unibot on Medium","type":"official","credibility":2},{"url":"https://www.coingecko.com/en/coins/unibot","name":"Unibot (UNIBOT) - CoinGecko","type":"other","credibility":2}],"severity":"low"},{"content":"The Unibot team operates primarily anonymously. Available information identifies one co-founder only as 'Ayden,' described as a former Apple employee, and a second unnamed co-founder from a Bay Area machine learning startup. No full names, LinkedIn profiles, or formal organizational disclosures have been publicly verified through Tier 1 or Tier 2 sources. The absence of identified founders is a standard risk factor for crypto projects: it limits accountability in the event of regulatory action, insider misconduct, or project abandonment. No regulatory action by the SEC, CFTC, or any equivalent body against Unibot or its founders has been identified in available sources.","heading":"Team Anonymity and Transparency","sources":[{"url":"https://beincrypto.com/learn/unibot-guide/","name":"Unibot: A Comprehensive Guide to the Telegram Bot - BeinCrypto","type":"news_article","credibility":2},{"url":"https://tokeninsight.com/en/coins/unibot/overview","name":"Unibot (UNIBOT) Live Price, Charts, Team - TokenInsight","type":"research","credibility":2}],"severity":"medium"},{"content":"Unibot was an early mover in the Telegram trading bot sector, achieving significant user adoption and token price appreciation in mid-2023 — the UNIBOT token reached a peak above $200 before the October 2023 exploit caused a sharp decline to the $30–$45 range. By 2024 the token had continued declining; it closed the year at approximately $6.42 (approximately -90% year-over-year). By 2025 it closed near $1.53 (-75% year-over-year). As of August 2026, the token trades at approximately $0.70 with a market cap near $636,000. Multiple competing Telegram trading bots (Maestro, Banana Gun, Bonkbot) emerged and captured market share. The project has reportedly dropped to seventh place by lifetime volume among Telegram trading bots. Current trading volume data indicates minimal active usage relative to the project's 2023 activity levels.","heading":"Market Trajectory and Competitive Position","sources":[{"url":"https://coinpedia.org/guest-post/unibot-dives-as-bitbot-gears-up-to-become-next-big-crypto-of-2024/","name":"Unibot Dives as Bitbot Gears up to Become the Next Big Crypto of 2024 - CoinPedia","type":"news_article","credibility":2},{"url":"https://www.coinbase.com/price/unibot-eth","name":"UniBot Price, UNIBOT Price, Live Charts, and Marketcap - Coinbase","type":"other","credibility":2},{"url":"https://crypto.news/unibot-collapse-solana-termination/","name":"UNIBOT Collapses by 45% on Termination of Solana Cooperation - Crypto.news","type":"news_article","credibility":2}],"severity":"low"}],"timeline":[{"date":"2023-05-17","event":"Unibot launched on Ethereum mainnet with a fair-launch distribution of 1,000,000 UNIBOT tokens.","source":"Crypto.com University","source_url":"https://crypto.com/us/university/what-is-unibot"},{"date":"2023-08-09","event":"Unibot launched 'Unibot Cloud,' relocating private key storage away from Telegram's platform. CertiK raised concerns about transparency of the implementation.","source":"DL News","source_url":"https://www.dlnews.com/articles/defi/unibot-telegram-bot-unveils-cloud-service-for-private-keys/"},{"date":"2023-10-28","event":"Unibot deployed a new version of its router smart contract.","source":"Revoke.cash Exploit Tracker","source_url":"https://revoke.cash/exploits/unibot"},{"date":"2023-10-31","event":"External attacker exploited a call injection vulnerability in Unibot's new router contract, stealing approximately 355.5 ETH ($560,000–$640,000) in user tokens. Stolen funds were subsequently routed through Tornado Cash. UNIBOT token price fell from approximately $57 to $32.","source":"Decrypt / The Block / CertiK","source_url":"https://decrypt.co/203795/unibot-telegram-bot-falls-prey-major-exploit-over-640k-crypto-lost"},{"date":"2023-11-04","event":"Unibot confirmed it had reimbursed all users affected by the October 31 exploit. The team recovered or repurchased 86% of stolen tokens at market value and paid $370,000 to cover Joe coin losses.","source":"CryptoTimes","source_url":"https://www.cryptotimes.io/2023/11/04/unibot-reimburses-users-following-recent-security-hack/"},{"date":"2024-03-11","event":"Unibot terminated its collaboration with the third-party group operating Unibot on Solana, citing an unauthorized Blast bot launch, refusal to complete KYC, and fee-sharing violations. UNIBOT token fell 33–45% on the announcement.","source":"CoinDesk","source_url":"https://www.coindesk.com/markets/2024/03/11/unibot-tanks-33-after-ending-collaboration-with-solana-group"},{"date":"2026-08-19","event":"UNIBOT token trading at approximately $0.70 with a market cap near $636,000 and 24-hour volume of approximately $2,000–$15,000, representing a steep decline from the 2023 peak.","source":"CoinMarketCap / Coinbase Price Data","source_url":"https://coinmarketcap.com/currencies/unibot-eth/"}],"sources_used":[{"url":"https://www.theblock.co/post/260133/unibot-confirms-exploit-and-promises-compensation-as-token-price-plunges","name":"Unibot Confirms Exploit and Promises Compensation - The Block","type":"news_article","archive_url":"http://web.archive.org/web/20251117041416/https://www.theblock.co/post/260133/unibot-confirms-exploit-and-promises-compensation-as-token-price-plunges","credibility":1,"archive_timestamp":"2025-11-17T04:14:16+00:00"},{"url":"https://decrypt.co/203795/unibot-telegram-bot-falls-prey-major-exploit-over-640k-crypto-lost","name":"Unibot Telegram Bot Falls Prey to Major Exploit Over $640k Lost - Decrypt","type":"news_article","archive_url":"http://web.archive.org/web/20260513003647/https://decrypt.co/203795/unibot-telegram-bot-falls-prey-major-exploit-over-640k-crypto-lost","credibility":1,"archive_timestamp":"2026-05-13T00:36:47+00:00"},{"url":"https://www.certik.com/resources/blog/1Zh5XbaDstXKteFcRSmOcp-maestro-and-unibot","name":"Maestro and Unibot Exploit Analysis - CertiK","type":"research","archive_url":"https://web.archive.org/web/20260830045330/https://www.certik.com/blog/1Zh5XbaDstXKteFcRSmOcp-maestro-and-unibot","credibility":1,"archive_timestamp":"2026-08-30T04:53:30+00:00"},{"url":"https://www.coindesk.com/markets/2024/03/11/unibot-tanks-33-after-ending-collaboration-with-solana-group","name":"Unibot Tanks 33% After Ending Collaboration With Solana Group - CoinDesk","type":"news_article","archive_url":"https://web.archive.org/web/20260915160725/https://www.coindesk.com/markets/2024/03/11/unibot-tanks-33-after-ending-collaboration-with-solana-group","credibility":1,"archive_timestamp":"2026-09-15T16:07:25+00:00"},{"url":"https://www.cryptotimes.io/2023/11/04/unibot-reimburses-users-following-recent-security-hack/","name":"Unibot Reimburses Users Following Recent Security Hack - CryptoTimes","type":"news_article","archive_url":"https://web.archive.org/web/20260819221106/https://www.cryptotimes.io/2023/11/04/unibot-reimburses-users-following-recent-security-hack/","credibility":2,"archive_timestamp":"2026-08-19T22:11:06+00:00"},{"url":"https://revoke.cash/exploits/unibot","name":"2023 Unibot Hack: Check If You're Affected - Revoke.cash","type":"other","archive_url":"http://web.archive.org/web/20260313112414/https://revoke.cash/exploits/unibot","credibility":2,"archive_timestamp":"2026-03-13T11:24:14+00:00"},{"url":"https://blog.solidityscan.com/unibot-hack-analysis-b8a57a78796a","name":"Unibot Hack Analysis - SolidityScan","type":"research","archive_url":"https://web.archive.org/web/20260819125607/https://blog.solidityscan.com/unibot-hack-analysis-b8a57a78796a/","credibility":2,"archive_timestamp":"2026-08-19T12:56:07+00:00"},{"url":"https://neptunemutual.com/blog/taking-a-closer-look-at-unibot-exploit/","name":"Taking a Closer Look at Unibot Exploit - Neptune Mutual","type":"research","archive_url":"https://web.archive.org/web/20260819151330/https://neptunemutual.com/blog/taking-a-closer-look-at-unibot-exploit/","credibility":2,"archive_timestamp":"2026-08-19T15:13:30+00:00"},{"url":"https://chainbulletin.com/unibot-to-compensate-users-affected-by-exploit","name":"Unibot to Compensate Users Affected by Exploit - The Chain Bulletin","type":"news_article","archive_url":"http://web.archive.org/web/20260123210533/https://chainbulletin.com/unibot-to-compensate-users-affected-by-exploit","credibility":2,"archive_timestamp":"2026-01-23T21:05:33+00:00"},{"url":"https://www.dlnews.com/articles/defi/unibot-telegram-bot-unveils-cloud-service-for-private-keys/","name":"Unibot Makes Changes to Thwart Private Key Thieves - DL News","type":"news_article","archive_url":"http://web.archive.org/web/20260625004118/https://www.dlnews.com/articles/defi/unibot-telegram-bot-unveils-cloud-service-for-private-keys/","credibility":2,"archive_timestamp":"2026-06-25T00:41:18+00:00"},{"url":"https://beosin.com/resources/unibot-exploited%E2%80%8A-%E2%80%8Aexamining-the-security-risks-of-telegram%C2%A0","name":"Unibot Exploited: Examining the Security Risks of Telegram Bots - Beosin","type":"research","archive_url":"http://web.archive.org/web/20251120013230/https://beosin.com/resources/unibot-exploited%E2%80%8A-%E2%80%8Aexamining-the-security-risks-of-telegram%C2%A0","credibility":2,"archive_timestamp":"2025-11-20T01:32:30+00:00"},{"url":"https://learn.unibot.app/faq/unibot-token","name":"UNIBOT Token - Unibot Official Docs","type":"official","archive_url":"http://web.archive.org/web/20260421132018/https://learn.unibot.app/faq/unibot-token","credibility":2,"archive_timestamp":"2026-04-21T13:20:18+00:00"},{"url":"https://medium.com/@uniboteth/unibot-v2-migration-tokenomics-upgrade-9b8635b344b1","name":"Unibot V2 Migration Tokenomics Upgrade - Unibot on Medium","type":"official","archive_url":null,"credibility":2,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null},{"url":"https://crypto.com/us/university/what-is-unibot","name":"What Is Unibot (UNIBOT)? - Crypto.com University","type":"research","archive_url":"http://web.archive.org/web/20260610130933/https://crypto.com/us/university/what-is-unibot","credibility":2,"archive_timestamp":"2026-06-10T13:09:33+00:00"},{"url":"https://blockchain.news/news/unibot-ends-partnership-with-solana-sol-team-cites-security-concerns","name":"Unibot Ends Partnership with Solana Team - Blockchain.news","type":"news_article","archive_url":"https://web.archive.org/web/20260819125610/https://blockchain.news/news/unibot-ends-partnership-with-solana-sol-team-cites-security-concerns","credibility":2,"archive_timestamp":"2026-08-19T12:56:10+00:00"},{"url":"https://coinmarketcap.com/currencies/unibot-eth/","name":"UniBot price today, UNIBOT to USD live price - CoinMarketCap","type":"other","archive_url":"http://web.archive.org/web/20260518134203/https://coinmarketcap.com/currencies/unibot-eth/","credibility":2,"archive_timestamp":"2026-05-18T13:42:03+00:00"},{"url":"https://www.coingecko.com/en/coins/unibot","name":"Unibot (UNIBOT) - CoinGecko","type":"other","archive_url":"http://web.archive.org/web/20250917025915/https://www.coingecko.com/en/coins/unibot","credibility":2,"archive_timestamp":"2025-09-17T02:59:15+00:00"},{"url":"https://tokeninsight.com/en/coins/unibot/team","name":"Unibot (UNIBOT) Team and Founder - TokenInsight","type":"research","archive_url":null,"credibility":2,"archive_error":"error:no-request","archive_status":"unarchivable","archive_timestamp":null}],"source_tags":["defillama"],"addresses":[],"reviewed":false,"reviewed_by":null,"model_used":"claude-sonnet-4-6","created_at":"2026-05-04T02:54:37.51976+00:00","updated_at":"2026-09-15T16:12:54.245281+00:00"}}