Skip to content
UNCX Token-Locking Pool Exploit Results in $86,000 Theft

UNCX Token-Locking Pool Exploit Results in $86,000 Theft

First seen 15 Oct 2026, 16:36 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 15, 2026 at 17:37 UTC
  • •An attacker exploited a flaw in UNCX's shared token-locking pool, stealing $86,000.
  • •The exploit involved manipulating contract accounting to withdraw other users' tokens.
  • •Approximately $3.25 million remains in the affected smart contract.

On October 14, 2026, an attacker exploited a vulnerability in UNCX Network's shared token-locking pool on Ethereum, stealing $86,000 in a single transaction. The exploit involved manipulating lock positions by unlocking a large position, transferring tokens, and then canceling and withdrawing assets from the pool. Security firm Blockaid identified the breach, revealing that a bookkeeping flaw allowed the attacker to withdraw tokens belonging to other users. Approximately $3.25 million remains in the affected smart contract, raising concerns about the security of shared vesting pools. The incident highlights significant vulnerabilities in decentralized finance (DeFi) platforms that utilize shared token-locking mechanisms. Recovery efforts and the exact assets taken are still unclear. UNCX has restricted new vesting positions as investigations continue.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-14
Exploit identified by Blockaid
Security firm Blockaid reported an ongoing exploit of UNCX's shared Ethereum vesting pool, resulting in an $86,000 theft.
News.Bitcoin
2026-10-14
UNCX restricts new vesting positions
In response to the exploit, UNCX restricted the creation of new vesting positions while investigations are ongoing.
Pluang

More articles in this cluster (2)

Following this threat?

Track UNCX Network in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (6)

1 / 2

Common questions

What specific vulnerability was exploited?
The attacker exploited a bookkeeping flaw in UNCX's shared vesting contract, allowing unauthorized withdrawals.
Is there a risk of further exploitation?
Yes, the ongoing presence of $3.25 million in the affected smart contract poses a risk for further exploitation.
What actions is UNCX taking in response?
UNCX has restricted new vesting positions and is investigating the exploit to prevent future incidents.