Key Takeaways
-
The UXLink hacker made repeated high-risk trades alternatively of safely cashing retired stolen funds.
-
Positions were often held done losses, with exits adjacent breakeven.
-
The exploit generated implicit $30 cardinal successful ETH, overmuch of which was actively traded.
The hacker down the monolithic UXLink breach has turned retired to beryllium amazingly atrocious astatine trading.
After stealing tens of millions successful cryptocurrency past year, the exploiter spent the past six months actively flipping the stolen ETH and different assets connected decentralized exchanges.
According to blockchain quality steadfast Arkham, the results haven’t been great.
The hacker racked up repeated losses on the mode and has lone precocious managed to crawl backmost to astir breakeven.
The UXLink exploiter has spent the past six months cycling stolen funds done decentralized exchanges, chiefly trading ETH and stablecoins.
On-chain information shows the standard of activity.
One snapshot reveals astir 625 idiosyncratic transactions, with predominant swaps betwixt ETH and DAI utilizing platforms similar CoW Swap.
The strategy, if it tin beryllium called that, followed a pattern.
The exploiter often bought into dips, held done volatility, and watched positions descent into losses earlier exiting—usually lone erstwhile prices recovered adjacent to breakeven.
Arkham’s profit-and-loss information highlights the outcome.
At aggregate points betwixt October 2025 and aboriginal 2026, the wallet sat arsenic overmuch arsenic $4 cardinal successful the red.
Despite continued trading, determination were nary sustained gains beyond the archetypal stolen funds.
The communicative began successful September 2025, erstwhile the attacker exploited a astute declaration vulnerability successful UXLink, an AI-powered Web3 societal platform.
The breach allowed the exploiter to instrumentality power of a multi-signature wallet and drain astir $11.3 cardinal successful assets.
The haul included $4 cardinal successful USDT, $500,000 successful USDC, $3.7 cardinal successful wrapped Bitcoin, and smaller amounts of ETH.
The onslaught didn’t halt there.
The hacker besides minted billions of UXLINK tokens and distributed them crossed decentralized markets, generating an further $28 cardinal successful ETH.
In total, the exploit produced betwixt $30 cardinal and $40 million, though immoderate funds were aboriginal mislaid successful a secondary phishing incident.
At first, the exit looked clean. Funds were divided crossed dozens of wallets and converted into ETH and stablecoins.
But alternatively of disappearing, the exploiter stayed active.
On-chain watchers accidental this benignant of behaviour is communal among exploiters who dainty stolen funds arsenic idiosyncratic trading accounts.

1 hour ago
3





English (CA) ·
English (US) ·
Spanish (MX) ·