A shared UNCX Network vesting pool on Ethereum was exploited on October 14, 2026, with Blockaid reporting approximately $86,000 drained through one transaction. ExVul estimated that five ERC-20 tokens worth about $87,700 were affected and put the attacker’s estimated profit at roughly $84,200 after 0.5624 ETH in fees and gas costs. The differing figures reflect estimates based on separate calculations and do not establish the attacker’s realized proceeds or final losses. ExVul attributed the incident to a suspected accounting flaw in UNCX’s VestingManager contract involving released and canceled vesting shares. UNCX said it was preventing new vesting positions while reviewing transactions and next steps for affected users, and later said existing contract positions and other liquidity-provider positions locked through its service were safe. The project described the incident as isolated, while noting that it would provide a consolidated update. UNCX, formerly UniCrypt, provides token vesting and liquidity-locking services. Its contracts previously held about $179.7 million across blockchains, including $111.4 million on Ethereum, and the affected contract held approximately $3.25 million after the reported drain. The incident’s full exposure and any recovery or reimbursement remain unresolved.