UNCX Vesting V2 Exploit Drains $1.49M Across Four Chains

UNCX Networks Vesting V2 contracts were exploited for roughly $1.49 million across four blockchains, blockchain security firm Blockaid reported on October 15, 2026, after an initial $86,000 drain on Ethereum grew more than 17-fold as copycat wallets and trading bots joined the attack. The vesting platform, formerly known as Unicrypt, disclosed the incident in an official statement and said it is coordinating with law enforcement and SEAL 911 toward a recovery plan.　　UNCX lets crypto projects lock liquidity and schedule token vesting so team and investor allocations cannot be sold at once. Blockaid attributed the drain to an accounting flaw in the VestingManager contract, the shared pool that governs those schedules.　　How the Accounting Flaw Was Exploited　　The flaw involved how the contract tracked released and canceled vesting shares. Security researchers at ExVul, who examined the first Ethereum transaction, said the release() function reduced the global share total without removing released shares from a positions recorded deposit, so a later cancellation deducted the same shares a second time.