Leaderboard
190All-time rank
UXLINK
Sep 22, 2025
$11.3M
Lost
$11.3M
Recovered
$0
Net loss
$11.3M
Unrecovered0% recovered
An attacker exploited a delegatecall in UXLINK's multisig wallet to rewrite the owner set without signer approval. 3M in stablecoins/ETH/WBTC, seizing ~490M UXLINK tokens, and minting 1-2B more before the token crashed over 70%.
- Target
- DeFi
- Classification
- Access Control
- Technique
- Delegatecall Hijack
- Attribution
- Unknown
- Chains
EthereumArbitrum
Event timeline
- Sep 22, 2025Exploit executed — $11.3M drained via delegatecall hijack
- Attributed to Unknown
- Recovery status Unrecovered 0%