According to CoinMeta, SlowMist revealed that uncx suffered an attack due to a vulnerability in the contract function vestingmanager.cancel (uint256), resulting in a loss of approximately $86,000. The attacker transferred tokens into the management contract to lower the conversion rate and canceled the plan to release shares, leading to an excessive reduction in the total number of shares. As a result, the attacker was able to withdraw an excess amount of tokens from the shared pool.