UNCX Lockers

Quick PSA for UNCX users, we will be migrating our docs.

Just use @helloSQD

Besides the tech which we recommend to read about (case study, their docs, etc), the team and its support is outstanding.

We're happy to connect you with their team, feel free to let us know.

Final Public Vesting Incident update

Following the October 14 Vesting V2 incident, we would like to share the following (positive) updates with our users:

1. Voluntary Recovery Program

The UNCX Foundation has stepped in and established a voluntary ex-gratia relief program aimed at providing affected projects with full recovery (subject to a maximum cap) of the realized proceeds from liquidated stolen assets.

This voluntary initiative is subject to legal, compliance, and eligibility reviews on a case-by-case basis.

Validation procedures, timelines, and next steps are currently being finalized and will be communicated directly to the affected projects.

2. Vesting Service

Our team is actively working on patching, strengthening, and enhancing our Vesting smart contracts in order to re-enable the service.

The service will be re-enabled once the necessary security improvements and validations have been completed and audited.

Existing users with vested positions can release their tokens as per their respective schedules.

As previously communicated, all LP Locker products and the remainder of the UNCX ecosystem continue operating as usual.

3. Security & Infrastructure Updates

Earlier today, our platform experienced a brief period of downtime as we deployed additional security updates addressing various externally disclosed vulnerabilities that have emerged over recent days and hours (independent from our incident or UNCX, but worth noting we made the necessary about external dependencies too).

4. Moving Forward

We remain fully committed to supporting our growing user base, continuously strengthening the products we build, and delivering reliable services to the ecosystem.

Our focus remains unchanged: security, resilience, transparency, and continuous improvement.

We appreciate the continued trust and patience of our community during the last week.

The UNCX Team

UNCX Vesting V2 Incident: Recap & Update

On October 14, 2026, attackers exploited an accounting vulnerability in Smart Token Vesting V2 contracts deployed on four networks.

The attacks involved a sequence of publicly accessible contract actions that caused discrepancies between pooled token balances and recorded shares, allowing attacker-controlled vesting positions to withdraw assets beyond their intended allocations.

We have published a detailed incident report covering the technical sequence, affected tokens, confirmed on-chain movements, liquidation paths, and amounts associated with each impacted community.

🔗 Full incident report: uncx.network/vesting-incide…

We encourage affected users and anyone seeking a precise understanding of the incident to consult this report directly.

1. Confirmed Financial Overview

Following our review of the available on-chain evidence, the figures identified to date are as follows:

> Approximately $807,000 USD in total assets extracted and subsequently liquidated, either immediately or over time, based on the combined ETH and USDT proceeds.

> Approximately $58,000 USD in ETH returned through the intervention of whitehat c0ffeebabe.eth and MEV operator Yoink, who successfully front-ran certain attacker transactions.

The recovered funds relate specifically to $IMO on Base and $X on Ethereum Mainnet. We extend our appreciation to those who intervened and helped recover these assets.

We have also seen a number of figures circulating online that do not align with the verified on-chain movements documented in our investigation. Some reports appear to repeat previously published estimates without independently validating the underlying transactions.

For clarity, the figures above reflect the liquidation proceeds identified so far, rather than speculative valuations of the tokens involved. The full report provides a breakdown by token and network.

2. Investigation & Recovery Efforts

The 48-hour window communicated to the remaining attackers has not yet expired at the time of this update. So far, we have received no response from them. The investigation remains ongoing.

Relevant parties (which we will not mention as the investigation continues for confidentiality) have been made aware of the incident.
We can also confirm that an affected protocol has independently filed a formal complaint with law enforcement. We will respect their privacy and will not disclose their identity.

UNCX continues to review technical evidence, asset movements, returned funds, and potential next steps alongside legal counsel and other relevant advisers.

3. Current Contract Security Status

The affected Smart Token Vesting V2 contracts do not use upgradeable proxies. As a result, the deployed contracts cannot be modified to re-enable vesting creation, and no new vesting positions will be ever accepted.

The attack vectors used on October 14 can therefore no longer be reproduced through the creation of new vesting positions.

Existing, unaffected vesting positions remain accessible, and tokens can continue to be withdrawn according to their scheduled releases.

Importantly, LP lockers are entirely unaffected. Liquidity locking contracts across all supported protocols and networks were not impacted by this incident and continue to operate normally.

4. What Happens Next?

Our immediate priorities remain the continued investigation of the incident, tracking the relevant on-chain movements and evaluating the available next steps with the appropriate parties.
This process requires care and time. We ask affected users and the wider community for patience and understanding while this work continues.

Verified updates will be shared through official UNCX communication channels whenever there are meaningful developments to report. At this stage, no individual outcome or specific timeline can be confirmed.

We recognize the impact this incident has had on affected communities and remain committed to providing clear, factual, and transparent information throughout the process.

The UNCX team.

UNCX Vesting V2 - Base chain Update

We can confirm that the funds affected on Base have been fully returned to the $IMO project (@IMO__Invest)

The address specifically involved on the Base chain was operated by white-hat c0ffeebabe.eth. The return was completed following coordination/verification with both parties.

Thanks to @seal_911 for their swift action and coordination throughout this recovery.

Our post-mortem analysis, and communications with the remaining addresses are ongoing within the 48-hour window. No further updates for now.

Recovery transaction:
basescan.org/tx/0x7ed6c60ca…