Blockaid puts UNCX Vesting V2 exploit losses near $1.49 million across four chains
Blockaid put losses from UNCX Network's Vesting V2 exploit at about $1.49 million across four chains, up from an initial $86,000 Ethereum drain, and UNCX says liquidity-pool lockers were unaffected.
Why it matters
UNCX provides vesting and liquidity-lock services that projects use to keep team and investor allocations from being sold at once, so a flaw in its VestingManager accounting affects pooled positions across several chains and pushes reimbursement work onto providers and affected projects, which Immunefi's Gonçalo Magalhães said they share. The spread to Robinhood Chain, a comparatively new venue, and the involvement of copycat wallets and MEV bots mean the loss can keep growing after the first transaction. Blockaid's figure is its own estimate and no final loss number from UNCX has appeared.
Where the sources disagree
Who drained the funds
11 drain transactions including copycat addresses and MEV bots, not one identified person (Bitcoin Insider citing Blockaid)
Bitcoin Insider
copycat wallets and trading bots joined the attack, which grew more than 17-fold (Crypto News citing Blockaid)
Crypto News (CryptoNews.net)
Bitcoin Insider says Blockaid's count of 11 drain transactions includes copycat addresses and MEV bots and should not be read as one transaction per identified person, while Crypto News ties the more than 17-fold growth to copycat wallets and trading bots.
Key facts
Blockaid's October 15 update put losses from UNCX Network's Vesting V2 exploit at about $1.49 million across four blockchains.
1,490,000 USDReported by Bitcoin Insider
Blockaid's first alert counted about $86,000 drained from a shared Ethereum vesting pool.
86,000 USDReported by Bitcoin Insider
Blockaid's chain breakdown put about $969,000 of losses on BNB Smart Chain.
969,000 USDReported by Bitcoin Insider
Blockaid's chain breakdown put about $242,000 of losses on Ethereum.
242,000 USDReported by Bitcoin Insider
Blockaid's chain breakdown put about $169,000 of losses on Robinhood Chain and about $114,000 on Base.
169,000 USDReported by Bitcoin Insider
Blockaid attributed the drain to an accounting flaw in the VestingManager contract, the shared pool governing vesting schedules.
Reported by Crypto News (CryptoNews.net)
UNCX said the incident was confined to Vesting V2 and that its liquidity-pool lockers were unaffected.
Reported by Bitcoin Insider
What happened
Blockaid's October 15 update put losses from UNCX Network's Vesting V2 exploit at roughly $1.49 million spread across BNB Smart Chain ($969,000), Ethereum ($242,000), Robinhood Chain ($169,000) and Base ($114,000), up from an earlier alert of about $86,000 taken from a shared Ethereum vesting pool. Blockaid counted 11 drain transactions and Crypto News, citing Blockaid, said copycat wallets and trading bots joined an attack that grew more than 17-fold; Bitcoin Insider's account likewise attributes the enlarged count to copycat addresses and MEV bots rather than one identified actor. Blockaid blamed an accounting flaw in the VestingManager contract, and both Crypto News and Crypto.News describe the same mechanism: the release() function cut the global share total without removing released shares from the position's deposit, so a later cancellation deducted the same shares again. ExVul researchers examined the first Ethereum transaction, while Immunefi security head Gonçalo Magalhães described the imbalance as coming from withdrawal and cancellation functions and said the flaw let attackers inflate claims on pooled tokens. UNCX, formerly Unicrypt, said the incident was confined to Vesting V2, that its liquidity-pool lockers were unaffected, and that it is coordinating with law enforcement and SEAL 911 on a recovery plan, and it also imposed flat fees above 1,000 ETH, removed interactions that bypassed fees and raised token fees to the contract's 5% maximum, according to Bitcoin Insider. The loss figure remains Blockaid's estimate rather than a final number published by UNCX, and Bitcoin Insider reports UNCX was still preparing further guidance, an incident report and recovery details as of October 15.
How the story developed
- Update
Blockaid's October 15 update raises the estimate to about $1.49 million across four chains
BNB Smart Chain $969,000, Ethereum $242,000, Robinhood Chain $169,000 and Base $114,000, with 11 drain transactions counted.
- First report
First report by Bitcoin Insider
Blockaid Puts UNCX Vesting Exploit Losses Near $1.49 Million Across Four Chains
- Update
Blockaid's first alert counts roughly $86,000 drained from a shared Ethereum vesting pool
The initial alert covered the Ethereum drain only.
- Official statement
UNCX discloses the incident and says it is confined to Vesting V2
The project said liquidity-pool lockers were unaffected, and imposed flat fees above 1,000 ETH, removed interactions that bypassed fees and raised token fees to the 5% contract maximum.
- Update
Immunefi security chief Gonçalo Magalhães describes the flaw to crypto.news
Magalhães said withdrawal and cancellation functions left share accounting out of balance, inflating the value assigned to remaining shares and letting attackers withdraw more than their position, and advised affected teams to seek private contact before public withdrawal warnings.
- Official statement
UNCX says it is coordinating with law enforcement and SEAL 911 on a recovery plan
The recovery coordination was disclosed in UNCX's official statement.
- Update
ExVul researchers explain the share-accounting flaw from the first Ethereum transaction
Researchers said release() reduced the global share total without removing released shares from a position's recorded deposit, so a later cancellation deducted them twice.
- Independent corroboration
Independently corroborated by Crypto.News
UNCX exploit exposes share-accounting flaw behind reported $1.5M loss
How coverage built up
Independent sources over time, counted the way the consensus panel counts them: a republication of a wire story does not move the line.
- 15 Oct 2026, 11:08 UTC: Bitcoin Insider — 1 independent source, 1 reports
- 16 Oct 2026, 04:45 UTC: Crypto News (CryptoNews.net) — 2 independent sources, 2 reports
- 16 Oct 2026, 19:24 UTC: Crypto.News — 3 independent sources, 3 reports
- 18 Oct 2026, 16:34 UTC: Crypto News Flash — 4 independent sources, 4 reports
- 19 Oct 2026, 12:30 UTC: Bitcoinist — 5 independent sources, 5 reports
Affected entities
Original sources
| Publisher | Report | Role | Published |
|---|---|---|---|
| Bitcoin Insider Aggregator | Blockaid Puts UNCX Vesting Exploit Losses Near $1.49 Million Across Four Chains | Original | |
| Crypto.News Crypto media | UNCX exploit exposes share-accounting flaw behind reported $1.5M loss | Independent | |
| Bitcoinist Crypto media | Cysic Bridge Exploit Creates 10 Million Tokens Before $727,000 Moves To Ethereum | Independent | |
| Crypto News Flash Crypto media | Another Bridge Hack: 10 Million Tokens Minted Without a Single Deposit | Independent | |
| Crypto News (CryptoNews.net) Aggregator | UNCX Vesting V2 Exploit Drains $1.49M Across Four Chains | Syndicated |
Related events
Robinhood Chain generates $51 million in first-quarter revenue, exceeding Ethereum's $41 million per ARK Invest data
Robinhood Chain earned about $51 million in network revenue during its first quarter of operation, surpassing Ethereum's roughly $41 million over the same period according to ARK Invest's Q3 2026 DeFi Quarterly.
Robinhood Chain Hits Record $3.7 Billion in 24-Hour DEX Volume as Arbitrum Revenue Sharing Draws Debate
Robinhood Chain set a new all-time high of $3.7 billion in 24-hour DEX volume on September 5, while an Arbitrum co-founder and Solana co-founder clashed over the merits of Robinhood's revenue-sharing model.
Uniswap Launches Aggregator Hooks Routing Trades to Seven External Liquidity Sources With Fees Burning UNI
Uniswap v4 now routes trades through seven outside DEXs on Ethereum, Base, and Robinhood Chain, collecting protocol fees that feed UNI token burns.
Robinhood Chain daily fees fell 97% from peak even as transaction counts stayed near highs
Robinhood Chain fee revenue dropped from roughly $8 million a day in early September to about $230,000 by Sept. 16, while transaction counts declined only 32%.
Wazz links 53 Robinhood Chain token launches to one ring that took at least $18.43M
On-chain analyst Wazz says 53 Robinhood Chain token launches over about two months were tied to one ring that extracted at least $18.43 million from buyers.
