UNCX Says Smart Token Vesting V2 Exploit Caused $807,600 in Losses

UNCX disclosed an Oct. 14 exploit of Smart Token Vesting V2 that caused about $807,600 in verified losses across Ethereum, BNB Chain, Base and Robinhood.

The incident stemmed from an imbalance between affected pools’ token balances and their recorded shares. Public vesting operations let positions controlled by the attacker withdraw more tokens than their recorded shares allowed. The calls did not use administrator privileges.

The incident covered 10 tokens and 11 confirmed withdrawal transactions across the four networks. BNB Chain accounted for about $567,500 of the verified value, making it the largest network component of the disclosed loss. That figure is part of, not additional to, the $807,600 aggregate.

After the incident, a white-hat returned 82.1435 million X tokens and 23.8682 Ether (ETH). No significant token balances remain to be handled. The recovery update listed returned assets in token amounts, while the attack’s verified economic value was stated in dollars.