Web3 social platform UXLINK has confirmed it was the victim of a major hack, losing an estimated $11.3 million after attackers exploited its core wallet and seized admin privileges. The breach, which spanned Ethereum and Arbitrum, has triggered an urgent response from the team, who are now working with exchanges and law enforcement to recover funds.
How the Attack Happened
On Sept. 22, blockchain security firm Cyvers flagged suspicious activity tied to a UXLINK protocol address. Their analysis revealed that the attacker used a “delegateCall” exploit to strip the project’s wallet of its administrator role. Control was then reassigned to a new owner with threshold permissions, effectively giving the hacker the keys to the platform’s funds.
This move enabled the attacker to drain $11.3 million, including $4.5 million in stablecoins, ETH, and WBTC. Portions of the stolen assets were swiftly bridged and swapped across networks, a classic laundering technique. Within minutes, an additional $3 million worth of UXLINK tokens were sent to another wallet, some of which remain unswapped.
UXLINK’s Response
UXLINK acknowledged the breach less than an hour after Cyvers raised the alarm, issuing what it called an “urgent security notice”. While the official statement did not disclose the full figure, the team confirmed a “significant amount of cryptocurrency” had been rerouted to both centralized and decentralized exchanges.
In its post, UXLINK said:
“We have already reached out to major CEXs and DEXs to urgently freeze suspicious UXLINK deposits and are coordinating closely with them to prevent further movement of funds. The incident has been reported to the police and relevant authorities to accelerate legal action and recovery efforts.”
The decision to involve law enforcement highlights both the scale of the attack and UXLINK’s determination to pursue restitution.
Bad Timing for a Growing Platform
The hack comes at a particularly sensitive time for UXLINK. Just three months ago, the Tokyo-headquartered company celebrated its third anniversary, touting milestones such as a 55 million–strong user base spread across more than 100 countries. The event emphasized growth, compliance, and innovation all qualities now overshadowed by a breach of its core treasury infrastructure.
The contrast is stark: a platform that positioned itself as a compliance-first, secure social Web3 hub is now grappling with the fallout of one of the more serious exploits seen this year.
As of press time, UXLINK has yet to issue any further updates on the investigation or potential recovery of funds.
