UNCX Network vesting pool exploited for $86,000, Blockaid reports

A shared token vesting pool run by UNCX Network was exploited on Ethereum, with roughly $86,000 in tokens pulled out in a single transaction, according to security firm Blockaid. The more uncomfortable number is the one left behind. The affected contract still held approximately $3.25 million in assets after the drain, and Blockaid flagged the attack as ongoing when it was detected. How the vesting pool exploit worked Blockaid reported the incident on October 14, 2026. The firm said one identified transaction took five different tokens out of the pool. The method relied on bending the contract’s own vesting logic. Per Blockaid, the attacker opened fresh vesting positions, released and donated tokens in a deliberate sequence, then canceled those positions. That cancellation step is where other people’s money walked out the door. The process let the attacker withdraw assets that other users had locked in the same pool. Blockaid made the exploiter addresses and a sample transaction public. That gives other security teams and onchain sleuths something concrete to trace, though publishing them does not, by itself, recover anything. UNCX’s track record and what was hit UNCX Network has o...