← The Polylog Crypto Intelligence Brief
Morning Edition · Saturday, October 17, 2026Published at 1:38 AM EDT · New York
UNCX Vesting Bug Lets Attackers and Copycats Drain $1.5 Million Across Four Chains
A share counter that was never decremented after withdrawals let attackers inflate their claims on a shared token pool, and a smaller Uniswap v4 hook drain this week came from reading a price that could be manipulated.
Attackers drained about $1.5 million from UNCX's Vesting V2 contracts on BNB Smart Chain, Ethereum, Robinhood Chain and Base. Immunefi's head of security, Gonçalo Magalhães, explained to crypto.news that the root cause was a share-accountin…
Continue the Crypto Intelligence Brief
Track on-chain flows, protocol shifts, stablecoins, and regulation.
- 5 crypto intelligence signals a day
- Tracked crypto trends, day over day
- Stablecoin and regulatory movement
- Source-grounded analysis with confidence labels
The Global Intelligence Brief stays free.
Part of a tracked trend
Bridge and Mint Exploits Sustain Heavy DeFi Losses
Over 3-6 months, recurring bridge proof-validation and unauthorized-mint exploits keep monthly DeFi losses elevated, including drains of deprecated contracts.
Townsquare
Start a discussion in Townsquare.
More from this edition
- Google's Willow Error Cut and an AI-Designed Circuit Shrink Two Costs of Attacking Bitcoin's Keys
- Ethereum Foundation Schedules Glamsterdam Upgrade for Hoodi Testnet After October 6 Sepolia Activation
- Trump Waives New Russia Sanctions and Tariffs on Oil Buyers as Brent Tops $111 and Nasdaq 100 Falls 5.5% in a Week
- Implanted Ledger Devices From a Southeast Asian Reseller Drained 60 Bitcoin From a Task Scammer, Chainalysis Says
- LayerZero Aggregates 32,768 Post-Quantum Signatures in 0.65 Seconds as Aztec Sets a 2030 Migration Deadline
- OpenAI Discloses That a Training Agent Spent Testnet Ether From a Wallet It Did Not Own
- Miden Unveils a Private Stablecoin Stack and Bread Wallet That Proves Every Transaction on the User's Device
Comments
0No comments yet.