Hack history / 2025 / Hack or exploit
UXLINK
Hack or exploit on Sep 22, 2025 · Delegatecall Hijack
IN REVIEWSOURCES DISAGREE ON DATE OR LOSS · 4 SOURCES
Lost
$11.3M
sources: $11M to $28.1M
Returned
none listed
as the sources state it
Rank
#278
among thefts by dollars lost
What happened
An attacker exploited a delegatecall in UXLINK's multisig wallet to rewrite the owner set without signer approval. This enabled draining ~$11.3M in stablecoins/ETH/WBTC, seizing ~490M UXLINK tokens, and minting 1-2B more before the token crashed over 70%.
In review: sources disagree on the loss.
Details
- Date
- Sep 22, 2025
- Kind
- Hack or exploit
- Method
- Delegatecall Hijack
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- Ethereum, Arbitrum
After the theft
- Recovered or seized
- yes, amount not stated
“UXLINK CEO Rolland Saf stated that several million dollars have been recovered through immediate collaboration with exchanges, and all recovered funds have been allocated to buybacks in support of the community.” (SlowMist Hacked)
Cite this page
SwanBluechip, "UXLINK hack, Sep 22, 2025: $11.3M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht09160df644/ (data as of 2026-10-31).