SlowMist|Oct 15, 2026 03:02
🚨SlowMist TI Alert🚨
💸 @UNCX_token Loss: ~$86k
🔍 Root Cause: VestingManager.cancel(uint256) did not ensure a schedule’s retained shares covered shares already released. After transferring tokens directly to the manager to lower its shares-per-token conversion rate, the sender topped up and canceled schedules whose original shares had been fully released. The cancellations over-reduced global shares, allowing another sender-controlled schedule to claim excess tokens from the shared pool.
📌 Attacker: 0x78c9b11853e4f183a34c63ffd1924d2319a2f5b3
📌 Vulnerable Contract: 0xa98f06312b7614523d0f5e725e15fd20fb1b99f5
Powered by http://SlowMist.AI
Tx: https://etherscan.io/tx/0x352065378c4a41b77e5b6a1e5b5616cd2886c3e1a2c87ed3db8e5ddddc23823d
Share To
Timeline
HotFlash
APP
X
Telegram
CopyLink