UXLINK Hack Update: Hacker Moves Stolen Funds, Sells $6.8M ETH

The UXLINK hack has progressed, with the perpetrator actively moving stolen assets. Recently, they converted approximately 1,620 ETH into DAI stablecoins, valued at around $6.8 million. This article delves into the details of the attack, including how the hacker initially exploited the protocol and subsequent measures taken by UXLINK to enhance security.

Key Takeaways

The hacker behind the UXLINK exploit has converted 1,620 ETH into DAI stablecoins, valued at approximately $6.8 million.
Following the attack, the hacker lost a significant amount of stolen funds due to a phishing incident.
The UXLINK hack occurred on September 22, exploiting a vulnerability in the project’s multi-signature wallet.
UXLINK has implemented emergency measures, including a token migration to a newly audited smart contract, to prevent future exploits.

UXLINK hack update: Hacker moves stolen funds, sells $6.8m ETH - 1

Update on the UXLINK Hack

The ongoing saga of the UXLINK hack has taken a new turn as the hacker continues to shuffle stolen funds. Recent data from on-chain trackers indicates that the attacker converted about 1,620 ETH into DAI stablecoins in the early hours today, which was worth roughly $6.8 million at that time. This transaction occurs nearly 48 hours post-exploit and is the hacker's first major attempt to liquidate the stolen assets.

Before this conversion, the hacker had been busy transferring funds among various wallets and utilizing both centralized and decentralized exchanges to obscure their trail and attempt to launder the proceeds.

"The hacker who attacked $UXLINK dumped 1,620 $ETH for 6.73M $DAI 2 hours ago."
— Lookonchain (@lookonchain) September 24, 2025

In a surprising turn of events, the hacker has inadvertently lost a considerable amount of stolen funds to a phishing scam. Security experts revealed that the attacker mistakenly authorized a harmful contract controlled by the Inferno Drainer group, which led to the draining of 542 million UXLINK tokens, valued around $43 million at the time.

Despite the recent conversion of ETH, this amount is only a fraction of the total stolen funds, with the hacker still believed to hold millions in various assets.

Footprint of the UXLINK Hack

The UXLINK breach initiated on September 22 and continued into the following day, revolving around a security flaw in the project’s multi-signature wallet. The exploit took advantage of a delegate call vulnerability, granting the attacker unauthorized administrator-level access. This enabled them to execute unauthorized transfers and generate large quantities of counterfeit tokens.

Within hours, the hacker minted nearly 10 trillion CRUXLINK tokens on the Arbitrum blockchain and quickly liquidated a portion for ETH, USDC, and other cryptocurrencies. This action drained liquidity and caused the token value to plummet by over 70%.

In reaction, UXLINK moved quickly to alert exchanges to freeze any dubious transactions and collaborated with security firms to investigate and limit additional losses. Unfortunately, their efforts fell short of fully mitigating the damage incurred.

To enhance security and prevent similar exploitations in the future, UXLINK has initiated emergency measures, including a token migration to a newly audited smart contract with a capped supply. This new audit focuses on strengthening security and tightening the controls surrounding multi-signature wallets and contract interactions.

The hacker's latest activities of transferring and converting funds complicate any prospects of recovering the stolen assets fully, and it remains uncertain whether further movements will follow soon.