Venues / Unibot

Is Unibot legit?

The checklist

Custody: who holds your money

Per Unibot's Terms, which say it is 'strictly non-custodial' and users retain sole control of private keys. Current docs do not describe how bot wallets are generated or stored. The 2023 exploit drained tokens users had approved to Unibot's router contract.

Incidents

• 2023-10-31: Router token-approval exploit. A new router contract deployed days earlier lacked input validation, letting an attacker move tokens users had approved to it. Losses were about $560k-$640k on Ethereum. Unibot paused the router and refunded users, which Revoke.cash puts at about $1.78M including token buybacks. UNIBOT fell 42.7% in an hour. source

Real downsides

• Lost about $560k-$640k of user tokens in an October 2023 router exploit.
• Current docs no longer publish a fee schedule or referral rates.
• DefiLlama-tracked Ethereum fees fell to zero after June 2026, suggesting little current activity.
• Multiple backup bot handles make impersonation easier; docs warn about fake bots.

Can you use it where you live?

Terms bar residents of comprehensively sanctioned or embargoed jurisdictions and sanctioned persons. No other countries are named, and governing law is not specified. (source)

We report what the venue's own terms say. Don't use a VPN to get around restrictions; venues can freeze accounts that do.

How to use Unibot without getting scammed

• Only open unibot.app — fake lookalike sites and "support" DMs are the most common way people lose funds on any trading venue.
• Never share a seed phrase or private key. No real support agent will ask for one.
• A referral code only changes your fee and who gets a share of it. It never needs your keys.
• Treat every new memecoin as able to go to zero. A legit venue does not make the coins on it safe.

Comparing options? See the full Unibot sheet or Banana Gun, Bloom, Trojan.