Audit log

Every state-changing event for UNCX Network: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

1. #1publishby system:backfill

   2026-10-15 04:07:18Z
   Score: ? → ? (no score change)
   anchoranchored

   chain

   ●mainnet-betaslot 457,098,605

   sig

   62BgHYsJYVmi…JV764SRAcopyexplorer ↗

   hash

   4WVXy49vw63G…dP7GvquAcopysha256 → base58

   verifying row…full verify ↗

   canonical bytes (12341 B) ▸

   {"actor":"system:backfill","investigation_id":"4136d659-c092-43c0-9f7f-e808d0d7a280","kind":"publish","page_slug":"uncx-network","published_at":"2026-10-15T04:07:18.235Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"UNCX Network","sections":[{"content":"On October 14, 2026, blockchain security firm Blockaid reported that UNCX Network's shared token vesting pool on Ethereum was being actively exploited. According to Blockaid, an attacker opened new vesting positions in the shared pool, released a large position, donated additional tokens back into the pool, and then cancelled a topped-up position. This sequence allegedly left a small residual position that could be used to withdraw tokens that other, unrelated users had locked in the same shared contract, effectively letting the attacker siphon third-party deposits rather than only their own. Blockaid identified two exploiter-associated addresses and published a sample transaction. Independent analysis by the security researcher group ExVul reported that five ERC-20 tokens worth an estimated $87,700 at spot prices were taken, with roughly $85,600 held in an identified exploit contract and an estimated mark-to-market attacker profit near $84,200 after gas costs; ExVul described these as estimates rather than confirmed realized losses. Outlets reporting the amount as 'about $86,000' cited Blockaid's figure. ExVul suspected, but did not confirm, that the root cause was an accounting flaw in UNCX's VestingManager contract, where the release() function reduced a global share total without correspondingly reducing a position's recorded deposited-share value, allowing cancellation to deduct the same shares a second time; a direct token donation was said to amplify the distortion. Named tokens reportedly affected in the drain include EDGEN, ZC, PEPECOIN, LO0P, and a token referred to as PAAL. One unverified social-media report (from a user identifying as representing the project FreeSpeech.FTW) claimed roughly $23,000 in forced token sales tied to the exploit; this claim is not independently confirmed and is treated as low confidence.","heading":"October 2026 Vesting Pool Exploit","severity":"critical","sources":[{"credibility":2,"name":"UNCX Network vesting pool exploited for $86,000, Blockaid reports","type":"news_article","url":"https://cryptobriefing.com/uncx-network-vesting-pool-exploited/"},{"credibility":2,"name":"UNCX Vesting Pool Exploited for About $86,000, Blockaid Says","type":"news_article","url":"https://thedefiant.io/news/hacks/uncx-vesting-pool-exploited-for-about-86-000-blockaid-says"},{"credibility":2,"name":"Blockaid Reports $86K Drained in UNCX Vesting Pool Exploit","type":"news_article","url":"https://www.cryptotimes.io/2026/10/15/blockaid-reports-86k-drained-in-uncx-vesting-pool-exploit/"},{"credibility":2,"name":"Hacker Drains $86,000 from UNCX Network's Shared Token Vesting Pool","type":"news_article","url":"https://www.kucoin.com/news/flash/hacker-drains-86-000-from-uncx-network-s-shared-token-vesting-pool"}]},{"content":"Following the disclosure, reporting indicated that the affected shared vesting contract still held approximately $3.25 million in third-party tokens per Etherscan data cited by Crypto Briefing, raising the possibility that additional user funds remained at risk if the exploit path was not fully closed. UNCX reportedly responded by blocking new vesting positions from entering the affected contract while it reviewed transactions and assessed options for affected users, and said it had set flat fees of 100 ETH or equivalent across its vesting contracts going forward. UNCX characterized the incident as isolated to the shared vesting pool and stated that liquidity-locker positions and other locked LP positions on its platform were unaffected. These statements are UNCX's own account, reported secondhand by Crypto Times, and have not been independently verified by a third-party audit or post-mortem at the time of writing. No comprehensive, independently audited accounting of total losses, full list of affected projects, or confirmation that the vulnerability has been fully remediated was found in available reporting.","heading":"Remaining Exposure and UNCX Response","severity":"high","sources":[{"credibility":2,"name":"UNCX Network vesting pool exploited for $86,000, Blockaid reports","type":"news_article","url":"https://cryptobriefing.com/uncx-network-vesting-pool-exploited/"},{"credibility":2,"name":"Blockaid Reports $86K Drained in UNCX Vesting Pool Exploit","type":"news_article","url":"https://www.cryptotimes.io/2026/10/15/blockaid-reports-86k-drained-in-uncx-vesting-pool-exploit/"}]},{"content":"UNCX Network was founded in 2020 under the name UniCrypt by CEO and co-founder Antoine Chaveron, who has said he and a co-founder met in an anonymous Telegram chat before building the project; the company is reported to be based in Tallinn, Estonia. UNCX provides liquidity-locking, token-vesting, a token minter, an ILO launchpad, and staking/farming tooling across multiple chains including Ethereum, BNB Chain, and Solana-based protocols. Reported total value locked figures vary significantly by source and date: DefiLlama snapshots reviewed showed UNCX-related TVL figures ranging from roughly $61.8 million to over $180 million depending on the specific contract version (V2, V3) and time of measurement, while a KuCoin news item cited approximately $179.7 million across chains including $111.4 million on Ethereum around the time of the exploit. A platform review cited a TVL figure of $370.95 million and claimed the platform had supported over 100,000 projects, though the date of that figure could not be confirmed. Claims that UNCX has cumulative TVL exceeding $164 million since 2020 or has processed over 74,000 locks, as cited by the party requesting this investigation, could not be independently verified against any source found in research and should be treated as unconfirmed.","heading":"Background and Scale of Operations","severity":"low","sources":[{"credibility":2,"name":"EEA Member Spotlight with UNCX Network's CEO and Co-founder Antoine Chaveron","type":"other","url":"https://entethalliance.org/eea-member-spotlight-with-uncx-networks-ceo-and-co-founder-antoine-chaveron/"},{"credibility":3,"name":"UNCX platform review","type":"other","url":"https://www.bitbond.com/resources/uncx-platform-review"},{"credibility":2,"name":"DefiLlama - UNCX Network V2","type":"on_chain","url":"https://defillama.com/protocol/uncx-network-v2"},{"credibility":2,"name":"Hacker Drains $86,000 from UNCX Network's Shared Token Vesting Pool","type":"news_article","url":"https://www.kucoin.com/news/flash/hacker-drains-86-000-from-uncx-network-s-shared-token-vesting-pool"}]},{"content":"Security rating firm CertiK's public listing for UniCrypt shows one audit on record, delivered May 20, 2021, which identified four findings, three of which were marked resolved and none rated critical; it is described as the only security review listed for the project on that platform. Separately, cybersecurity vendor Halborn has published a case study describing an engagement in which it audited UNCX's smart contracts, including liquidity lockers and token vesting schedules, performed threat modeling and cross-chain security review, and provided post-audit advisory support; the case study does not state when this engagement occurred and, as vendor marketing material, its claims of effectiveness are not independently verified. A promotional press release from partner Krown Technologies, dated February 2026, asserted that UNCX had a public record of zero protocol-level hacks prior to that announcement; this is a third-party partner's promotional claim rather than an independent audit finding, and it was superseded by the October 2026 exploit.","heading":"Prior Security History","severity":"medium","sources":[{"credibility":2,"name":"CertiK - UniCrypt project page","type":"research","url":"https://certik.org/projects/unicrypt"},{"credibility":3,"name":"Halborn case study - UNCX Network","type":"other","url":"https://www.halborn.com/case-studies/post/case-study-fortifying-token-infrastructure-security-for-uncx-network"}]}],"sources_used":[{"credibility":2,"name":"UNCX Network vesting pool exploited for $86,000, Blockaid reports","type":"news_article","url":"https://cryptobriefing.com/uncx-network-vesting-pool-exploited/"},{"credibility":2,"name":"UNCX Vesting Pool Exploited for About $86,000, Blockaid Says","type":"news_article","url":"https://thedefiant.io/news/hacks/uncx-vesting-pool-exploited-for-about-86-000-blockaid-says"},{"credibility":2,"name":"Hacker Drains $86,000 from UNCX Network's Shared Token Vesting Pool","type":"news_article","url":"https://www.kucoin.com/news/flash/hacker-drains-86-000-from-uncx-network-s-shared-token-vesting-pool"},{"credibility":2,"name":"Blockaid Reports $86K Drained in UNCX Vesting Pool Exploit","type":"news_article","url":"https://www.cryptotimes.io/2026/10/15/blockaid-reports-86k-drained-in-uncx-vesting-pool-exploit/"},{"credibility":2,"name":"EEA Member Spotlight with UNCX Network's CEO and Co-founder Antoine Chaveron","type":"other","url":"https://entethalliance.org/eea-member-spotlight-with-uncx-networks-ceo-and-co-founder-antoine-chaveron/"},{"credibility":3,"name":"UNCX platform review","type":"other","url":"https://www.bitbond.com/resources/uncx-platform-review"},{"credibility":2,"name":"DefiLlama - UNCX Network V2","type":"on_chain","url":"https://defillama.com/protocol/uncx-network-v2"},{"credibility":2,"name":"CertiK - UniCrypt project page","type":"research","url":"https://certik.org/projects/unicrypt"},{"credibility":3,"name":"Halborn case study - UNCX Network","type":"other","url":"https://www.halborn.com/case-studies/post/case-study-fortifying-token-infrastructure-security-for-uncx-network"}],"summary":"UNCX Network (formerly UniCrypt) is a multi-chain liquidity-locking and token-vesting protocol founded in 2020 and based in Tallinn, Estonia, used by thousands of token projects across Ethereum, BNB Chain, and other networks. On October 14, 2026, security firm Blockaid identified an ongoing exploit of UNCX's shared Ethereum token vesting pool in which an attacker manipulated the position lifecycle to drain roughly $86,000 in third-party tokens; UNCX halted new vesting deposits into the affected contract and described the incident as isolated, while millions of dollars in other users' locked tokens reportedly remained in the same contract pending review.","timeline":[{"date":"2020","event":"UniCrypt (later rebranded UNCX Network) is founded, introducing one of the earliest liquidity-locking tools in DeFi.","source":"EEA Member Spotlight / The Big Whale","source_url":"https://entethalliance.org/eea-member-spotlight-with-uncx-networks-ceo-and-co-founder-antoine-chaveron/"},{"date":"2021-05-20","date_evidence":"Last Audit was delivered on 5/20/2021","event":"CertiK delivers an audit of UniCrypt's contracts, recording four findings with three resolved and none rated critical.","source":"CertiK project listing","source_url":"https://certik.org/projects/unicrypt"},{"date":"2026-02","event":"Krown Technologies announces UNCX as its official lockup and token vesting provider, citing UNCX's record of zero prior protocol-level hacks.","source":"Partner press release cited in research","source_url":"https://en.thebigwhale.io/the-ocean/uncx-network"},{"date":"2026-10-14","date_evidence":"Blockaid posted its alert on October 14, 2026","event":"Blockaid detects and reports an ongoing exploit of UNCX Network's shared Ethereum token vesting pool, with an estimated $86,000 drained in a single transaction via position-lifecycle manipulation.","source":"The Defiant","source_url":"https://thedefiant.io/news/hacks/uncx-vesting-pool-exploited-for-about-86-000-blockaid-says"},{"date":"2026-10","date_original":"2026-10-15","event":"Follow-up reporting indicates roughly $3.25 million remained in the affected V2 contract, and UNCX reportedly blocks new vesting deposits into the contract while reviewing the incident and setting flat fees across vesting contracts.","source":"Crypto Briefing / Crypto Times","source_url":"https://www.cryptotimes.io/2026/10/15/blockaid-reports-86k-drained-in-uncx-vesting-pool-exploit/"}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision 5c2a3069-21fe-4988-ab33-d14722dc8449copy