UNCX Network Exploit Exposes Vulnerability in Token Vesting Pools
- An $86,000 exploit was identified in UNCX’s shared Ethereum vesting pool on October 14.
- Security firm Blockaid and Exvul researchers traced the vulnerability to faulty share accounting, affecting ten tokens across four blockchains.
- Approximately $3.25 million remains in the affected smart contract, prompting UNCX to restrict new vesting positions and increase fees.
- The exploit allowed manipulation of the contract’s accounting to withdraw other users’ tokens without stealing private keys.
- UNCX is working with law enforcement and SEAL911 on recovery efforts, but stolen funds have not been returned.
The UNCX Network faced a significant security breach when an attacker exploited a flaw in its shared token vesting pool’s accounting system, affecting multiple cryptocurrencies including those on BNB Chain and others. This incident highlights vulnerabilities in decentralized finance systems that rely on shared infrastructure for managing token distribution schedules.
Despite restricting new activities and raising fees to mitigate further damage, UNCX has yet to recover the stolen assets or fully assess the financial impact of this breach.( Source )
