# New Exploit Reproductions Show a Uniswap v4 Hook and a Token-Vesting Pool Drained Through Price and Accounting Flaws

The KolanHook drain combined an unguarded function with settlement at a manipulable spot price, and the UNCX case depended on share accounting in a shared vesting pool. The NEAR Intents and Bitget incidents set the scale for recent losses.

- Published: 2026-10-16T05:52:42.472Z
- Canonical: https://polylog.news/crypto/2026-10-16/new-exploit-reproductions-show-a-uniswap-v4-hook-and-a-token
- Publisher: Polylog (Crypto desk)
- Section: crypto
- Sources: [DeFiHackLabs (KolanHook spot-price PoC)](https://github.com/SunWeb3Sec/DeFiHackLabs/commit/7363f76db51f0fea97f8e659b20ee8bdc5fbca25), [DeFiHackLabs (KolanHook accept PoC)](https://github.com/SunWeb3Sec/DeFiHackLabs/commit/0252d93789b09cca91a5537189369f428b8097a2), [DeFiHackLabs (merge, count 894)](https://github.com/SunWeb3Sec/DeFiHackLabs/commit/b29ee9bdb3ca655bc233fb8b30e0ac5748196745), [DeFiHackLabs (UNCX PoC)](https://github.com/SunWeb3Sec/DeFiHackLabs/commit/6e9c6074d9a880df194c76748b6a2d330bdf3bc3), [DeFiHackLabs (UNCX PoC, earlier commit)](https://github.com/SunWeb3Sec/DeFiHackLabs/commit/fea4e2049c427dfb6e985959e2453004c8e88b17), [DeFiHackLabs (merge)](https://github.com/SunWeb3Sec/DeFiHackLabs/commit/92d26b2b9c3ec884242e92dbde9bcf00e1b5cd2d), [Rekt News](https://www.rekt.news/)

DeFiHackLabs, the open repository that rebuilds real exploits as runnable proofs of concept, added two new decentralized finance (DeFi) incidents over the past day. A merge commit brought its catalogue to 894 entries. The commit titles in t…

This story is for subscribers. Read it in full at https://polylog.news/crypto/2026-10-16/new-exploit-reproductions-show-a-uniswap-v4-hook-and-a-token (subscription information: https://polylog.news/pricing).