UNCX Network vesting contract exploit drains $1.49 million across four chains
CIE News ·
Confirmed by 2 independent news outlets.
UNCX Network suffered an exploit of its Vesting V2 contracts, losing about $1.49 million across four chains due to a share-accounting flaw that copycats joined.
UNCX Network suffered an exploit of its Vesting V2 smart contracts that drained about $1.49 million across four blockchains, cryptotimes.io reported citing security firm Blockaid. The attack began late on October 14, 2026, and expanded as copycat addresses and automated bots replicated the exploit across BNB Smart Chain, Ethereum, Robinhood Chain, and Base. Security researchers at Exvul determined the root cause was an accounting flaw in the VestingManager contract logic that mishandled released and canceled shares, enabling small positions to claim assets from shared pools. To curb further drained funds, UNCX disabled fee-bypass interactions, raised token fees to the 5% maximum, and set new lock fees above 1,000 ETH.
Key facts
- $1.49M drained
- 4 blockchains affected
- Vesting V2 contract flaw
- Lock fees raised over 1,000 ETH
Read the original at BeInCrypto