The Vesting Bug Cost $86,000. The Copycats Made It $1.49 Million.
Blockaid flagged $86,000 on one chain. The next count came back at $1.49 million on four.
UNCX Network’s Vesting V2 contracts lost about $1.49 million across four blockchains by October 15, 2026, per Blockaid[1]. A day earlier it flagged $86,000 on Ethereum; the new count put $969,000 on BNB Smart Chain, $169,000 on Robinhood Chain and $114,000 on Base[2].
Blockaid logged 11 drain transactions: copycat addresses repeating the attack, plus MEV bots[3]. The bug needed copying, not finding. Copying is free. UNCX’s report counted about $807,609 across 10 tokens[4].
No funds had come back from the attacker or the copycats, per Blockaid[5]. White hats returned 82,143,476 X tokens and 23.8682 ETH[6].
What to do: check UNCX’s event report; the project says it is coordinating with SEAL 911 and law enforcement[4][7].
Who gains, who loses
Receipts
Blockaid said on October 15, 2026 that losses from the UNCX Network Vesting V2 exploit had grown to about $1.49 million across four blockchains, roughly 17 times the $86,000 it first flagged on Ethereum a day earlier.
“Losses from an exploit targeting UNCX Network's Vesting V2 smart contracts have grown to about $1.49 million across four blockchains, blockchain security firm Blockaid said on October 15, 2026.”
Blockaid's chain breakdown put about $969,000 of the UNCX Vesting V2 losses on BNB Smart Chain, $242,000 on Ethereum, $169,000 on Robinhood Chain and $114,000 on Base.
“Blockaid's chain breakdown put about $969,000 on BNB Smart Chain, $242,000 on Ethereum, $169,000 on Robinhood Chain and $114,000 on Base.”
Blockaid counted 11 drain transactions in the UNCX Vesting V2 exploit, including activity from copycat addresses and maximal extractable value (MEV) bots.
“Blockaid counted 11 drain transactions in total. These included activity from copycat addresses, meaning wallets that appear to have replicated the original attack method, as well as maximal extractable value (MEV) bots.”
UNCX's official event report states the attack involved 10 tokens and 11 confirmed withdrawal transactions with a verified economic value of approximately $807,609, of which about $567,500 was from the BNB Chain.
“The attack affected four networks: Ethereum, BNB Chain, Base, and Robinhood, involving 10 tokens and a total of 11 confirmed withdrawal transactions, with a verified economic value of approximately $807,609, of which about $567,500 was…”
As of Blockaid's October 15 update, no funds had been returned by the primary attacker or the copycat addresses in the UNCX Vesting V2 exploit.
“As of the update, no funds had been returned by the primary attacker or the copycat addresses.”
After the UNCX Vesting V2 incident, white hats returned 82,143,476 X tokens and 23.8682 ETH, and no significant tokens remain pending disposal.
“After the incident, white hats returned 82,143,476 X tokens and 23.8682 ETH, and currently, there are no significant tokens pending disposal.”
UNCX is coordinating with law enforcement and SEAL 911, the emergency incident response service run by the Security Alliance (SEAL), on the Vesting V2 exploit.
“The project said it is in contact with most of the affected teams and is coordinating with law enforcement and SEAL 911, the emergency incident response service run by the Security Alliance (SEAL).”
Cabal Desk is reporting, written with AI under human oversight. Every bracketed number opens its receipt: the source, the quoted span, the hash. Headlines and characterisations are commentary; the sourced facts are the receipts. Not investment advice. Corrections log. Editorial & legal.