Security firm Blockaid reported an exploit on the UNCX Network vesting platform on October 14, 2026. An attacker successfully drained five different tokens from a shared Ethereum vesting contract in a single transaction, resulting in a loss of approximately $86,000.
The attacker manipulated the contract's vesting logic by creating, releasing, donating, and subsequently canceling vesting positions. This sequence allowed the perpetrator to withdraw assets belonging to other users locked within the same shared pool.
Despite the initial theft, the affected contract still held approximately $3.25 million in assets at the time of detection. Blockaid identified the attack as ongoing when it was first discovered and has since published the attacker's addresses and a sample transaction.
UNCX Network has been active since 2020, providing liquidity locking and token vesting services. The protocol reports over $164 million in total value locked and more than 74,000 created locks. The company has not yet issued a public response regarding the incident.
