The Share Counter Stopped Adding Up and $1.49 Million Left UNCX
Four chains, 11 drain moves, $1.49 million, and a share counter that broke.
The UNCX Vesting V2 hack cost about $1.49 million across Ethereum, BNB Chain, Base and Robinhood Chain, per Blockaid[1]. Blockaid said 11 drain moves came from the first attacker, copycat wallets and MEV bots[1].
A lead at Immunefi said the contract’s share counts broke when users took out vested tokens and closed their locks[2]. That meant functions could break the global counter’s rule[2].
UNCX said its older lockers and old vesting contracts were not hit[3]. White hats gave back 82,143,476 X tokens and 23.8682 ETH[4]. About $3.25 million was still in the hit Ethereum contract when Blockaid found the attack[5].
What to do: no action needed — UNCX says its older lockers and old vesting contracts were not touched[3].
Who gains, who loses
Receipts
Blockaid estimated gross losses from the UNCX Vesting V2 exploit at approximately $1.49 million across Ethereum, BNB Chain, Base and Robinhood Chain, attributing 11 drain transactions to the original attacker, copycat wallets, and MEV bots.
“The Crypto Times reported on Oct. 15 that Blockaid had estimated losses at approximately $1.49 million across Ethereum, BNB Chain, Base and Robinhood Chain.”
Immunefi's head of security Gonçalo Magalhães explained that the UNCX Vesting V2 contract failed to keep its share counters consistent when users withdrew vested tokens and canceled positions, and that the smart contract failed to ensure no functions could break the invariant around the shares' global counter.
“Ultimately, the smart contract failed to make sure that no functions could break the invariant around the shares' global counter.”
UNCX said its liquidity lockers and legacy vesting contracts remained unaffected by the Vesting V2 exploit, and no funds had been returned by the original attacker or copycats on any chain as of the update.
“UNCX said its liquidity lockers and legacy vesting contracts remain unaffected.”
After the UNCX incident, white hats returned 82,143,476 X tokens and 23.8682 ETH, and UNCX stated it is working with legal advisors to review technical evidence and subsequent handling.
“After the incident, white hats returned 82,143,476 X tokens and 23.8682 ETH, and currently, there are no significant tokens pending disposal.”
To contain the UNCX exploit, the team raised flat fees above 1,000 ETH per new lock, removed paths that bypassed fees, and lifted token fees to the 5% contract maximum, while about $3.25 million was still in the affected Ethereum contract when Blockaid identified the attack.
“To contain the exploit it raised flat fees above 1,000 ETH per new lock, removed paths that bypassed fees, and lifted token fees to the 5% contract maximum. About $3.25 million was still in the affected Ethereum contract when Blockaid…”
Cabal Desk is reporting, written with AI under human oversight. Every bracketed number opens its receipt: the source, the quoted span, the hash. Headlines and characterisations are commentary; the sourced facts are the receipts. Not investment advice. Corrections log. Editorial & legal.