During Wednesday’s session, Blockaid detected an active exploit in UNCX Network’s shared vesting smart contract on Ethereum, where an attacker managed to drain approximately $86,000 across five ERC-20 tokens. ERC-20 tokens. The vulnerability stemmed from an accounting flaw in the handling of released and revoked allocations within the VestingManager contract, which allowed manipulation of the system logic to extract funds locked by other users.
Blockaid detected an ongoing exploit on @UNCX_token on ethereum.
~$86k drained from the shared vesting pool so far across 1 drain tx. Attack still ongoing.
— Blockaid (@blockaid_) October 14, 2026
The incident triggered alarms because the affected contract still held more than $3.2 million in assets at the time of the attack. As an immediate containment measure, the UNCX Network team restricted the creation of new vesting positions and temporarily raised fees to 100 ETH to halt any further malicious interactions. They clarified, however, that individual locks and standard liquidity positions remain secure.
The market is awaiting UNCX’s final technical post-mortem along with mitigation and compensation measures for affected projects, while the attacker’s addresses remain under close on-chain monitoring.
Source: https://x.com/blockaid_/status/2110406902752387455
Disclaimer: Crypto Economy Flash News updates are prepared using official, public sources verified by our editorial team. Their purpose is to provide prompt reporting on key developments across the crypto and blockchain ecosystem. This information does not constitute financial advice or investment recommendations. We recommend always checking each project’s official channels before making any related decisions.
Be the first to comment