Data leak [loss] $28M+

"UXLINK goes from bad, to worse, to weird after hacker loses stolen tokens"

2025-09-22 [vendor] UXLINK
Primary Source ↗
Financial Loss $28.1M (28,100,000 USD)

Incident Details

The “AI-powered web3 social platform” UXLINK was exploited by an attacker that gained control of the project’s multisignature wallet, then minted billions of the project’s UXLINK token. Though the tokens were worth hundreds of millions of dollars on paper, low liquidity and a crashing token price means the attacker cashed out around $28 million.Shortly after the hack, the attacker apparently approved a phishing contract, perhaps in their rush to swap tokens before the price crashed further or before exchanges could freeze the tokens. Around 542 million of the UXLINK tokens were sent to a phishing address as a result, though it doesn’t appear the phishing wallet has been able to sell the tokens.

Total loss estimated at $28,100,000.

Technical Details

Initial Attack Vector
Phishing attack
Vendor / Product
UXLINK

Timeline

  1. 2025-09-22 Breach occurred
  2. 2025-09-22 Publicly disclosed