CoinMeta data: A vulnerability in the V2 version of UNCX exposed a shared accounting flaw, resulting in losses of approximately $1.5 million for attackers across four chains. Immunefi, the security responsible person, Gon ç alo Magalh ã es stated that the contract failed to maintain consistency in its shared counters when users withdrew pledged tokens and closed positions. The vulnerability stemmed from the contract's release function, which allowed beneficiaries to withdraw tokens available according to the pledging scheme. After withdrawals, this function failed to deduct the released shares from the position counter, leading to accounting distortions. Attackers exploited this flaw to withdraw more tokens than they were entitled to. Magalh ã es also pointed out that the way contract functions were updated and shared balances were reused was the root cause of this issue.