UNCX Vesting V2 Incident: Recap & Update On October 14, 2026, attackers exploited an accounting vulnerability in Smart Token Vesting V2 contracts deployed on four networks. The attacks involved a sequence of publicly accessible contract actions that caused discrepancies between pooled token balances and recorded shares, allowing attacker-controlled vesting positions to withdraw assets beyond their intended allocations. We have published a detailed incident report covering the technical sequence, affected tokens, confirmed on-chain movements, liquidation paths, and amounts associated with each impacted community. 🔗 Full incident report: uncx.network/vesting-inciden… We encourage affected users and anyone seeking a precise understanding of the incident to consult this report directly. 1. Confirmed Financial Overview Following our review of the available on-chain evidence, the figures identified to date are as follows: > Approximately $807,000 USD in total assets extracted and subsequently liquidated, either immediately or over time, based on the combined ETH and USDT proceeds. > Approximately $58,000 USD in ETH returned through the intervention of whitehat c0ffeebabe.eth and MEV operator Yoink, who successfully front-ran certain attacker transactions. The recovered funds relate specifically to $IMO on Base and $X on Ethereum Mainnet. We extend our appreciation to those who intervened and helped recover these assets. We have also seen a number of figures circulating online that do not align with the verified on-chain movements documented in our investigation. Some reports appear to repeat previously published estimates without independently validating the underlying transactions. For clarity, the figures above reflect the liquidation proceeds identified so far, rather than speculative valuations of the tokens involved. The full report provides a breakdown by token and network. 2. Investigation & Recovery Efforts The 48-hour window communicated to the remaining attackers has not yet expired at the time of this update. So far, we have received no response from them. The investigation remains ongoing. Relevant parties (which we will not mention as the investigation continues for confidentiality) have been made aware of the incident. We can also confirm that an affected protocol has independently filed a formal complaint with law enforcement. We will respect their privacy and will not disclose their identity. UNCX continues to review technical evidence, asset movements, returned funds, and potential next steps alongside legal counsel and other relevant advisers. 3. Current Contract Security Status The affected Smart Token Vesting V2 contracts do not use upgradeable proxies. As a result, the deployed contracts cannot be modified to re-enable vesting creation, and no new vesting positions will be ever accepted. The attack vectors used on October 14 can therefore no longer be reproduced through the creation of new vesting positions. Existing, unaffected vesting positions remain accessible, and tokens can continue to be withdrawn according to their scheduled releases. Importantly, LP lockers are entirely unaffected. Liquidity locking contracts across all supported protocols and networks were not impacted by this incident and continue to operate normally. 4. What Happens Next? Our immediate priorities remain the continued investigation of the incident, tracking the relevant on-chain movements and evaluating the available next steps with the appropriate parties. This process requires care and time. We ask affected users and the wider community for patience and understanding while this work continues. Verified updates will be shared through official UNCX communication channels whenever there are meaningful developments to report. At this stage, no individual outcome or specific timeline can be confirmed. We recognize the impact this incident has had on affected communities and remain committed to providing clear, factual, and transparent information throughout the process. The UNCX team.

Comments have been turned off for this post on purpose to avoid misinformation, phishing attempts, and other types of 'AI slop' responses which do not provide added value. Our team remains available using direct channels. Thank you for understanding.

UNCX Vesting V2 - Base chain Update We can confirm that the funds affected on Base have been fully returned to the $IMO project (@IMO__Invest) The address specifically involved on the Base chain was operated by white-hat c0ffeebabe.eth. The return was completed following coordination/verification with both parties. Thanks to @seal_911 for their swift action and coordination throughout this recovery. Our post-mortem analysis, and communications with the remaining addresses are ongoing within the 48-hour window. No further updates for now. Recovery transaction: basescan.org/tx/0x7ed6c60ca8…

UNCX Vesting V2 - Update We have contacted two addresses directly on-chain, offering a 10% white-hat bounty in exchange for the return of the remaining 90% of the funds obtained through the exploit. A third address has been contacted directly via Blockscan Chat, and we are coordinating with @SEAL_911 regarding another address currently holding funds. We have established a dedicated recovery email address, [email protected], and a recovery multisig to facilitate the secure return of funds within the next 48 hours. We are continuing to consolidate transaction data, assess the full impact, and verify figures before publishing a comprehensive incident report. We appreciate your patience as this process continues. Please rely exclusively on this account for official, verified updates. For parties holding affected funds, and to verify the authenticity of our on-chain recovery messages, our designated recovery multisig address is: 0x32f0eB068fD804195629A2CBEE30A7e9CE58c4cb We will share further updates as verified information becomes ready to be published.

UNCX Vesting V2: Security Incident Update Following the security incident affecting our Vesting V2 contracts across several chains earlier today, we want to share an update on the measures taken, the affected tokens, and what comes next. 1. Security measures and containment We have implemented several measures to prevent further exploitation of the affected contracts: > Introduced substantial flat fees exceeding 1,000 ETH per lock. > Removed all clients and contract interactions that previously allowed these fees to be bypassed. > Increased token fees to the maximum permitted by the Vesting V2 contracts (5%), making repeated vesting top-ups economically unviable. These measures are designed to prevent further exploitation through the identified methods. While our investigation and monitoring remain ongoing, we firmly believe we have taken the necessary steps available to us to contain the incident. 2. Scope of the incident As previously communicated, all LP lockers remain unaffected, across every protocol and chain supported by UNCX. The incident is isolated to UNCX Vesting V2. Our legacy vesting contracts are also unaffected and have undergone additional checks and review. The incident currently involves 10 tokens across 4 chains: Ethereum (6): $pepecoin, $EDGEN, $ZC, $X, $LO0P, $PAAL Base (1): $IMO BNB Chain (1): $BTCLE Robinhood Chain (2): $CASHCAT, $RKST 3. Next steps for affected projects and communities We are already in contact with most of the affected teams, communities or individuals impacted. We expect to share further guidance and next steps with affected teams this week. We will also publish a comprehensive incident report covering the technical findings, financials, and the details of our proposed recovery plan. Important: For all impacted tokens, we strongly advise against trading in the affected pools until further guidance is provided by the respective token teams. We will be coordinating directly with those teams over the coming days. 4. Investigation and recovery efforts Our investigation remains active, and we are coordinating with law enforcement and @seal911. To date, no funds have been returned by the attackers (primary and copycats) on any affected chain. We strongly encourage the responsible party to contact us directly to discuss a resolution. We understand the seriousness of this incident for affected projects, holders, and communities. Our immediate priorities remain preventing further exploitation, establishing the full extent of the impact, and working closely with affected teams toward a recovery plan. We will continue to communicate when any meaningful updates become available. Thank you for your patience. The UNCX Team

Incident noticed. As an immediate first measure we're currently preventing further vesting positions to hit the contract which shall allow us to review the transactions and next steps for impacted users. Flat fees on all vesting contracts have been put to 100 ETH or equivalent. Will update shortly.

We will show you this month. Real Markets.

Max pain is when you take the trade. Anything that happens after that is a net positive. Max pain on the primary market is 2%. I would take that trade every single day.

Good morning to the UNCX userbase. We have good news. @arc > we have just rolled out our smart vesting suite on the chain. Teams can now vest, lock, distribute, stream, airdrop directly on Arc.

Mark Karpelès had seen this Ledger resellers issue coming for some time, all you need to do to understand what happens is to scroll through his X @MagicalTux Be safe, and do not panic if you bought from the official store.

Expect us to gradually let you know what we are building there. We are solving something major. We currently are taking calls and showcasing the product to sharp minds willing to see it. If you're curious, feel free to reach out. We take calls, show face, and gather feedback.

Real Markets

Real Markets? 👀

Protocol users mean everything to us since day 1 @BitcoinBTCLE uses the suite to both lock their @PancakeSwap LP and to vest their supply according to their schedules. Just lock it, with UNCX. Thank you for being recurring users. We wish you the best with the project. 🔒🔒🔒

Domain has been secured

Unicrypt. UNCX. We don't make the rules. What do you think @aixbt_agent ?

For the last 6 years we have fixed issues as a DeFi service provider. It is now time for something entirely new. Something where users are actually protected. Downside/risk has to be capped. ETA: 2 weeks Time to fix further issues. A new primitive is coming, made by UNCX 😎