UNCX Network V2

An attacker exploited UNCX Vesting V2’s shared token accounting by creating vesting positions, releasing a large position, donating tokens into the pool, and cancelling a topped-up vest. This sequence allowed a small remaining vesting position to withdraw tokens belonging to other users.

UNCX confirmed additional affected assets across four chains and introduced emergency fees and restrictions to contain the exploit.