On October 31, Beosin Alert announced that the root cause of the attack on Unibot was CAll injection. Attackers can pass custom malicious call data to the 0xb2bd16ab() method to transfer approved tokens to the Unibot contract. Users need to revoke authorization for 0x126c9FbaB3A2FCA24eDfd17322E71a5e36E91865 as soon as possible.

#DYOR。