BlockSec: The attack on Unibot may be due to the lack of input validation of function 0xb2bd16ab in the 0x126c contract
BlockSec stated on social media that due to Unibot's code not being open source, we suspect that the function 0xb2bd16ab in the 0x126c contract lacks input validation, allowing for arbitrary calls. Therefore, attackers can call "transferFrom" to transfer the approved tokens out of the contract. Please revoke approval as soon as possible.
Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.
You may also like
Today's Fear and Greed Index fell slightly to 93, and the level is still extremely greedy
Breaking Down the Best: Why Qubetics, Ethereum, and Chainlink Are Leading November’s Crypto Scene
Court extends pretrial detention of Tornado Cash developer Pertsev