.
@UNCX_token lost ~$86k to a share accounting bug in VestingManager 🚨
cancel() didn’t check that retained shares covered shares already released, letting the attacker over-reduce global shares and claim excess tokens from the shared pool.
Forta Firewall flagged it.