{"id":79532,"date":"2026-10-15T06:23:13","date_gmt":"2026-10-15T06:23:13","guid":{"rendered":"https:\/\/crowdfundjunction.com\/blog\/an-86000-exploit-rocks-a-crypto-pool-built-to-lock-tokens\/"},"modified":"2026-10-15T06:23:13","modified_gmt":"2026-10-15T06:23:13","slug":"an-86000-exploit-rocks-a-crypto-pool-built-to-lock-tokens","status":"publish","type":"post","link":"https:\/\/crowdfundjunction.com\/blog\/an-86000-exploit-rocks-a-crypto-pool-built-to-lock-tokens\/","title":{"rendered":"An $86,000 Exploit Rocks a Crypto Pool Built to Lock Tokens"},"content":{"rendered":"<p><b>(Originally posted on : Bitcoin News )<\/b><br \/>\n<\/p>\n<div>\n<div class=\"@container mb-[25px] rounded-sm overflow-clip py-0.5 pr-0.5 pl-2.5 bg-success-100\">\n<div class=\"flex flex-col gap-m overflow-clip rounded-[6px] !bg-success-10 p-3 @[420px]:p-m\">\n<h2 class=\"m-0 flex items-center gap-s text-[19px] !text-[#1c1c1c] md:text-[20px]\"><svg xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"16\" height=\"10\" viewbox=\"0 0 16 10\" fill=\"none\" class=\"shrink-0 text-success-100\" aria-hidden=\"true\"><path d=\"M1 1.5h14\" stroke=\"currentColor\" stroke-width=\"2.5\" stroke-linecap=\"round\"\/><path d=\"M1 8.5h10\" stroke=\"currentColor\" stroke-width=\"2.5\" stroke-linecap=\"round\"\/><\/svg><span>Key Takeaways<\/span><\/h2>\n<ul class=\"m-0 flex list-none flex-col gap-m pl-0\">\n<li class=\"m-0 flex items-start gap-s !text-[#434248]\"><span class=\"mt-2 size-2 shrink-0 rounded-full bg-success-100\" aria-hidden=\"true\"\/><span class=\"text-body\">Security firm Blockaid identified an $86,000 exploit against UNCX\u2019s shared Ethereum vesting pool on Oct. 14.<\/span><\/li>\n<li class=\"m-0 flex items-start gap-s !text-[#434248]\"><span class=\"mt-2 size-2 shrink-0 rounded-full bg-success-100\" aria-hidden=\"true\"\/><span class=\"text-body\">Exvul security researchers traced the UNCX vulnerability to faulty share accounting that exposed deposits from 5 tokens.<\/span><\/li>\n<li class=\"m-0 flex items-start gap-s !text-[#434248]\"><span class=\"mt-2 size-2 shrink-0 rounded-full bg-success-100\" aria-hidden=\"true\"\/><span class=\"text-body\">UNCX restricted new vesting positions as questions persisted over $3.25 million remaining in the pool.<\/span><\/li>\n<\/ul>\n<\/div>\n<\/div>\n<h2>How an $86,000 Exploit Turned a Token Lock Into a Liability<\/h2>\n<p>On Wednesday, blockchain security firm Blockaid <a href=\"https:\/\/x.com\/blockaid_\/status\/2110406902752387455\" target=\"_blank\" rel=\"noopener noreferrer\">sounded the alarm<\/a> over an exploit targeting UNCX Network, formerly known as Unicrypt. Rather than stealing private keys or breaking into individual wallets, the attacker reportedly manipulated the contract\u2019s own accounting machinery to withdraw tokens belonging to other users.<\/p>\n<p>\u201cThe attacker created vesting positions in the shared token pool, released a large one, donated tokens in, then cancelled a topped-up vest so a tiny leftover vest could withdraw other users\u2019 locked tokens,\u201d Blockaid wrote on X.<\/p>\n<p>The real eyebrow-raiser was what remained behind. Approximately $3.25 million was still sitting inside the affected <a href=\"https:\/\/www.bitcoin.com\/get-started\/blockchain-tech\/infrastructure\/what-is-a-smart-contract\/\" target=\"_blank\" rel=\"noopener noreferrer\">Ethereum smart contract<\/a> when Blockaid identified the attack as ongoing. Security researchers at Exvul subsequently provided a detailed explanation of the accounting flaw that made the theft possible.<\/p>\n<h2>What Is a Shared Token Vesting Pool?<\/h2>\n<p>To understand the caper, it helps to know what UNCX actually does. Operating since 2020, the platform provides <a href=\"https:\/\/news.bitcoin.com\/finance\/discover-how-20-million-russians-tap-into-over-43b-in-cryptocurrency\/\">cryptocurrency projects<\/a> with tools to lock liquidity and distribute tokens according to predetermined schedules. Its services help founders, developers and investors demonstrate that certain assets cannot be sold before an agreed date.<\/p>\n<p>Token vesting works much like a corporate stock compensation plan. Instead of receiving everything at once, recipients get their assets gradually, sometimes after an initial waiting period. The arrangement discourages early selling and helps keep participants committed to a project\u2019s longer-term prospects.<\/p>\n<p>A shared vesting pool takes that arrangement one step further. Rather than deploying a separate contract for every allocation, multiple <a href=\"https:\/\/news.bitcoin.com\/unlocking-the-future-your-fun-guide-to-decentralized-finance-and-web3\/\">decentralized finance (DeFi)<\/a> projects place tokens inside common smart-contract infrastructure. Each position has its own recorded balance and release schedule, while the contract maintains the accounting for everyone.<\/p>\n<p>It\u2019s convenient, generally less expensive and easier to manage. But there\u2019s a catch. When the shared bookkeeping goes haywire, funds belonging to unrelated projects can suddenly find themselves in the same predicament.<\/p>\n<h2>A Tiny Leftover Position Became the Attacker\u2019s Golden Ticket<\/h2>\n<p><a href=\"https:\/\/x.com\/exvulsec\/status\/2110408967822381342\" target=\"_blank\" rel=\"noopener noreferrer\">According to Exvul<\/a>, the vulnerability centered on UNCX\u2019s VestingManager contract and its handling of released and canceled token shares. These shares represent accounting claims against tokens held inside the contract.<\/p>\n<p>The attacker first created new vesting positions, then released tokens from a substantial position. Additional tokens were subsequently deposited into the pool, and a previously funded position was canceled. That sequence produced the critical accounting discrepancy.<\/p>\n<p>The security researchers explained that the contract\u2019s release() function reduced the global _totalTokenShares figure without correspondingly removing released shares from the position\u2019s _depositedShares record. When the position was later canceled, the contract deducted shares using the original recorded deposit, effectively counting the same reduction twice. A direct token donation further distorted the arithmetic.<\/p>\n<p>The result was a tiny residual vesting position that could claim assets backing other users\u2019 deposits. In ordinary language, the contract\u2019s ledger no longer accurately reflected who was entitled to what. The attacker had found a way to make a nearly empty position behave as though it carried a much larger claim. No stolen <a href=\"https:\/\/www.bitcoin.com\/wallet\/what-is-a-private-key\/\" target=\"_blank\" rel=\"noopener noreferrer\">private keys<\/a> were required. The contract\u2019s own mathematics did the heavy lifting.<\/p>\n<h2>Ten Tokens Taken as Researchers Trace the Money<\/h2>\n<p>Initially, the reported theft involved five <a href=\"https:\/\/www.bitcoin.com\/price\/\" target=\"_blank\" rel=\"noopener noreferrer\">distinct cryptocurrencies<\/a>, EDGEN, ZC, PEPECOIN, LO0P and PAAL. A later update from UNCX shifted the count to ten tokens. That brings us to the real catch. The attacker wasn\u2019t simply withdrawing money from an account they controlled. The flawed share calculations allegedly allowed one participant\u2019s position to reach assets belonging to others. For a platform whose business revolves around preventing premature token withdrawals, that\u2019s a particularly uncomfortable predicament.<\/p>\n<h2>UNCX Moves to Contain the Damage<\/h2>\n<p>UNCX <a href=\"https:\/\/x.com\/UNCX_token\/status\/2110413504008089965\" target=\"_blank\" rel=\"noopener noreferrer\">acknowledged the incident<\/a> on X and prevented new vesting positions from entering the affected contract while its team reviewed transactions and assessed the damage. The platform also established flat fees of 100 ETH, or the equivalent, across vesting contracts, creating another obstacle to ordinary activity while the investigation proceeded.<\/p>\n<p>In <a href=\"https:\/\/x.com\/UNCX_token\/status\/2110506196339941423?s=20\" target=\"_blank\" rel=\"noopener noreferrer\">its latest update at 7 p.m.<\/a> Eastern time on Wednesday, UNCX confirmed the exploit affected ten tokens across four blockchains, including Ethereum, Base, BNB Chain and Robinhood Chain. The company raised flat fees above 1,000 ETH per lock, increased token fees to 5% and closed methods used to bypass those charges.<\/p>\n<p>UNCX stressed that its liquidity lockers and legacy vesting contracts remain unaffected. Meanwhile, the company is working with law enforcement and SEAL 911 to investigate the breach.<\/p>\n<h2>Stolen Funds Remain Missing as Recovery Efforts Begin<\/h2>\n<p>UNCX said neither the original attacker nor copycats had returned any stolen funds. The platform is contacting affected projects, advising against trading impacted tokens in affected pools and preparing a comprehensive incident report with financial findings and a proposed recovery plan.<\/p>\n<p>For now, the final losses remain uncertain, and the attackers are still holding the stolen assets.<\/p>\n<div class=\"not-prose my-3 lg:my-4\">\n<div class=\"overflow-hidden rounded-lg !bg-[#E8EDFA] p-[9px] hidden md:flex md:flex-row md:gap-3 lg:hidden\"><a aria-hidden=\"true\" tabindex=\"-1\" class=\"relative size-[150px] min-w-[150px] shrink-0 overflow-hidden rounded-[15px]\" href=\"https:\/\/news.bitcoin.com\/brooklyn-da-fbi-crush-massive-international-crypto-scam\/\"><\/p>\n<div class=\"absolute left-2 top-2\"><img alt=\"Bitcoin.com News\" loading=\"lazy\" width=\"28\" height=\"28\" decoding=\"async\" data-nimg=\"1\" class=\"size-7\" style=\"color:transparent\" srcset=\"\/_next\/image\/?url=%2Fimages%2Fuploads%2Fbitcoin_news_newlogo.svg&amp;w=32&amp;q=75 1x, \/_next\/image\/?url=%2Fimages%2Fuploads%2Fbitcoin_news_newlogo.svg&amp;w=64&amp;q=75 2x\" src=\"https:\/\/news.bitcoin.com\/_next\/image\/?url=%2Fimages%2Fuploads%2Fbitcoin_news_newlogo.svg&amp;w=64&amp;q=75\"\/><\/div>\n<p><\/a><\/div>\n<div class=\"overflow-hidden rounded-lg !bg-[#E8EDFA] p-[9px] hidden lg:flex lg:flex-row lg:gap-4\"><a aria-hidden=\"true\" tabindex=\"-1\" class=\"relative size-[150px] min-w-[150px] shrink-0 overflow-hidden rounded-[15px]\" href=\"https:\/\/news.bitcoin.com\/brooklyn-da-fbi-crush-massive-international-crypto-scam\/\"><img alt=\"Brooklyn DA and FBI Crush Massive International Crypto Scam\" loading=\"lazy\" decoding=\"async\" data-nimg=\"fill\" class=\"object-cover\" style=\"position:absolute;height:100%;width:100%;left:0;top:0;right:0;bottom:0;color:transparent\" sizes=\"150px\" srcset=\"\/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F10%2Fbrooklyn-da-and-fbi-crush-massive-international-crypto-scam-150x150.png&amp;w=32&amp;q=75 32w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F10%2Fbrooklyn-da-and-fbi-crush-massive-international-crypto-scam-150x150.png&amp;w=48&amp;q=75 48w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F10%2Fbrooklyn-da-and-fbi-crush-massive-international-crypto-scam-150x150.png&amp;w=64&amp;q=75 64w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F10%2Fbrooklyn-da-and-fbi-crush-massive-international-crypto-scam-150x150.png&amp;w=128&amp;q=75 128w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F10%2Fbrooklyn-da-and-fbi-crush-massive-international-crypto-scam-150x150.png&amp;w=256&amp;q=75 256w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F10%2Fbrooklyn-da-and-fbi-crush-massive-international-crypto-scam-150x150.png&amp;w=384&amp;q=75 384w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F10%2Fbrooklyn-da-and-fbi-crush-massive-international-crypto-scam-150x150.png&amp;w=640&amp;q=75 640w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F10%2Fbrooklyn-da-and-fbi-crush-massive-international-crypto-scam-150x150.png&amp;w=828&amp;q=75 828w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F10%2Fbrooklyn-da-and-fbi-crush-massive-international-crypto-scam-150x150.png&amp;w=1080&amp;q=75 1080w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F10%2Fbrooklyn-da-and-fbi-crush-massive-international-crypto-scam-150x150.png&amp;w=1200&amp;q=75 1200w, \/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F10%2Fbrooklyn-da-and-fbi-crush-massive-international-crypto-scam-150x150.png&amp;w=1920&amp;q=75 1920w\" src=\"https:\/\/news.bitcoin.com\/_next\/image\/?url=https%3A%2F%2Fstatic.news.bitcoin.com%2Fwp-content%2Fuploads%2F2026%2F10%2Fbrooklyn-da-and-fbi-crush-massive-international-crypto-scam-150x150.png&amp;w=1920&amp;q=75\"\/><\/p>\n<div class=\"absolute left-2 top-2\"><img alt=\"Bitcoin.com News\" loading=\"lazy\" width=\"28\" height=\"28\" decoding=\"async\" data-nimg=\"1\" class=\"size-7\" style=\"color:transparent\" srcset=\"\/_next\/image\/?url=%2Fimages%2Fuploads%2Fbitcoin_news_newlogo.svg&amp;w=32&amp;q=75 1x, \/_next\/image\/?url=%2Fimages%2Fuploads%2Fbitcoin_news_newlogo.svg&amp;w=64&amp;q=75 2x\" src=\"https:\/\/news.bitcoin.com\/_next\/image\/?url=%2Fimages%2Fuploads%2Fbitcoin_news_newlogo.svg&amp;w=64&amp;q=75\"\/><\/div>\n<p><\/a><\/p>\n<div class=\"flex min-w-0 flex-1 flex-col justify-center gap-2\">\n<p class=\"m-0 line-clamp-2 text-base leading-[1.3] !text-[#67656E]\">On Wednesday, Brooklyn prosecutors disclosed that they have dealt a major blow to an international cryptocurrency scam that stole tens\u2026<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<p><a href=\"https:\/\/news.bitcoin.com\/security\/an-86000-exploit-rocks-a-crypto-pool-built-to-lock-tokens\/\">Source link <\/a><br \/>\n<br \/><\/p>\n","protected":false},"excerpt":{"rendered":"<p>(Originally posted on : Bitcoin News ) Key Takeaways Security firm Blockaid identified an $86,000 exploit against UNCX\u2019s shared Ethereum vesting pool on Oct. 14. Exvul security researchers traced the UNCX vulnerability to faulty share accounting that exposed deposits from 5 tokens. UNCX restricted new vesting positions as questions persisted over $3.25 million remaining in [&hellip;]<\/p>\n","protected":false},"author":19,"featured_media":79533,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0},"categories":[32],"tags":[],"_links":{"self":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/posts\/79532"}],"collection":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/users\/19"}],"replies":[{"embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/comments?post=79532"}],"version-history":[{"count":0,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/posts\/79532\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/media\/79533"}],"wp:attachment":[{"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/media?parent=79532"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/categories?post=79532"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/crowdfundjunction.com\/blog\/wp-json\/wp\/v2\/tags?post=79532"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}