Analytics platform Fuzzland has revealed that a former employee was responsible for a $2 million exploit targeting UniBTC.
Details of the UniBTC Exploit
Fuzzland reported that the insider used social engineering and advanced persistent threat techniques to steal sensitive data. The vulnerability in UniBTC was discussed during an emergency call just before the attack, allowing the perpetrator to insert malicious code that remained undetected for weeks.
Compensation to Bedrock and Joint Investigation
Fuzzland stated that it had compensated Bedrock for the $2 million loss and initiated a joint investigation with security firm ZeroShadow. Reports were also filed with Chinese law enforcement and the FBI. Despite the incident, no client data was affected, as it was confined to an internal environment.
Increase in Cyber Attacks in 2025
Hackers stole over $2.1 billion in cryptocurrency in 2025, according to CertiK. Most of the losses were due to phishing attacks and wallet compromises. CertiK co-founder Ronghui Gu noted that the rise in social engineering attacks suggests a strategic shift among hackers.
The UniBTC exploit raises significant questions about security in the industry and underscores the need for improved monitoring and protection of smart contracts.
