SlowMist disclosed UNCX was attacked, with losses of approximately 86000 USD
BIBIBI
AT A GLANCE
UNCX was attacked, and the report stated that losses were approximately 86000 USD。
Article
SlowMist:UNCX The loss from the attack was approximately 86000 USD
PANews October 15 According to information disclosed by SlowMist,UNCX（@UNCX_token) was attacked, with losses of approximately 86000 USD. The root cause was that the contract function VestingManager.cancel(uint256) did not ensure that the shares retained by a vesting plan covered the shares already released. The attacker first transferred tokens directly to the management contract to reduce the share conversion rate per token, then topped up and canceled a plan whose original shares had been fully released, causing global shares to be excessively reduced and enabling another plan under the attacker's control to claim excess tokens from the shared pool.
SlowMist disclosed UNCX was attacked, with losses of approximately 86000 USD。
02
The root cause was identified as VestingManager.cancel(uint256) failing to ensure that the shares retained by a vesting plan covered the shares already released.
03
The attacker first transferred tokens directly to the management contract to reduce the share conversion rate per token, then topped up and canceled a plan whose original shares had been fully released.
04
The report stated that this operation caused global shares to be excessively reduced and enabled another plan controlled by the attacker to claim excess tokens from the shared pool.
AI-assisted interpretation
The following is analysis, separate from reported facts. Verify important claims independently.
The vesting contract is responsible for managing scheduled token releases. The vulnerability described in the report may have allowed the attacker to obtain more tokens than normally permitted by altering share calculations and canceling specific plans.
Why it matters to readers
This indicates that the relevant vesting contract had an exploited share-validation issue, resulting in approximately 86000 USD in losses.
Users need to understand that share calculations and cancellation rules in the contract affect whether tokens can be claimed normally.
Risks and unknowns
The evidence does not specify the affected chain, token amount, scope of affected users, or flow of funds.
The evidence does not state whether the vulnerability has been fixed or whether interaction with the relevant contract has been suspended.
The evidence does not state whether compensation or other user-protection arrangements exist.
The attack path and loss amount above are derived from reports; no official response or on-chain verification materials are present in the evidence.
Related Developments
Loading event timeline…
Related concepts
VestingManager
This term is not in the glossary yet. Browse related concepts in the glossary.
