Some hours back, there are users who have lost funds due to a scam airdrop that exploits Thorchain's code base
In this sort of attack the hacker airdrops the malicious tokens to several addresses of the would be victims. In this case the malicious token that was airdropped was UNI Holding (UniH) tokens
Once the victim tries to authorize the airdropped token in order to exchange it, the victim’s address instantly gets drain off other tokens if they available in the same address. In other words, the hacker will transmit tokens from your wallet to his address without needing any private keys or seeds.
1. Avoid participating in airdrops at all and giving out your sensitive details like email addresses and wallet addresses.
2. If you must, use fresh address for each airdrop and token.
3. If you receive a questionable token in you address yet you never participated in any airdrop program, abandon the address and move your tokens to a fresh one. Do not move the suspicious token to an exchange and try to exchange it with the other tokens still in the wallet.