UNCX disclosed Smart Token Vesting V2 a cross-chain attack involving losses of approximately 807600 USD
BIBIBI
AT A GLANCE
UNCX disclosed Smart Token Vesting V2 was subject to a cross-chain exploit, with approximately 807600 USD in verified economic losses.
Article
UNCX disclosed Smart Token Vesting V2 a cross-chain attack incident involving losses of approximately 807600 USD According to BlockBeats,October 17, according to the UNCX Network official incident report,October 14, the attacker exploited a set of public Smart Token Vesting V2 vesting operations to create an inconsistency between token balances in the pool and recorded shares, enabling controlled positions to withdraw excess tokens.
The attack affected Ethereum、BNB Chain, Base, and Robinhood, spanning networks, 10 token types, and a total of 11 confirmed withdrawal transactions, with verified economic value of approximately 807600 USD, of which BNB Chain accounted for approximately 567500 USD. None of the relevant calls used administrator privileges. Following the incident, white hats returned 82143500 X tokens and 23.8682 ETH, and there are currently no material tokens pending disposal.
Original link https://m.theblockbeats.info/flash/372370
Key points
01
According to the UNCX Network official incident report, the attack occurred on October 14。
02
The attacker exploited Smart Token Vesting V2 a set of public vesting operations, causing an inconsistency between token balances in the pool and recorded shares, and withdrew excess tokens from controlled positions.
03
The incident affected Ethereum,BNB Chain, Base, and Robinhood, spanning networks and 10 token types, with a total of 11 confirmed withdrawal transactions.
04
The verified economic value was approximately 807600 USD, of which BNB Chain accounted for approximately 567500 USD。
05
None of the relevant calls used administrator privileges.
06
Following the incident, white hats returned 82143500 X tokens and 23.8682 ETH。
07
The report stated that there are currently no material tokens pending disposal.
AI-assisted interpretation
The following is analysis, separate from reported facts. Verify important claims independently.
Vesting tools typically limit withdrawable tokens according to recorded shares. In this incident, the attacker created a discrepancy between actual pool balances and shares recorded by the system, withdrawing more tokens than should have been available from controlled positions.
Why it matters to readers
The incident involved networks, 10 token types, and approximately 807600 USD in verified economic value, demonstrating that public operations, in certain combinations, can also result in excess asset withdrawals without necessarily requiring administrator privileges.
Beginners using token vesting services or holding related tokens should monitor affected positions, asset returns, and subsequent disposal announcements; the original text does not provide specific actions for individual users.
Risks and unknowns
The source text does not state whether the vulnerability has been fixed, nor whether the relevant contracts have been paused or migrated.
The source text does not list 10 affected tokens, specific positions, or 11 transaction details.
The original text does not specify whether the amount is approximate 807600 USD or whether it represents the final loss, or whether returned assets have been included in this figure.
The source text does not state the affected parties, the compensation plan, or whether additional withdrawal transactions may still occur.
The source text lists Robinhood as one of the networks, but does not further explain what it specifically refers to.
Related Developments
Loading event timeline…
Related concepts
Smart Token Vesting V2
This term is not in the glossary yet. Browse related concepts in the glossary.
