Web3 social media platform UXLINK confirmed that hackers stole $11.3 million in cryptocurrency from its multi-signature wallet, causing the company’s token value to plummet by more than 70%. The breach involved unauthorized transfers to multiple centralized and decentralized exchanges, according to blockchain security firm Cyvers. UXLINK tokens worth approximately $3 million were among the stolen assets, with hackers immediately selling $800,000 worth on the open market.
Cyvers’ investigation revealed that attackers used a sophisticated method to compromise UXLINK’s security infrastructure. The hackers employed a delegateCall function to remove administrative privileges from legitimate operators.
This technical maneuver allowed them to add themselves as new multi-signature wallet owners through the addOwnerWithThreshold function.
The security breach demonstrates vulnerabilities in smart contract architecture that many Web3 platforms face. Multi-signature wallets typically require multiple parties to authorize transactions, providing enhanced security compared to single-signature systems. However, when properly exploited, these systems can still be compromised through careful manipulation of administrative functions.
UXLINK’s stolen assets included $4 million in Tether (USDT), plus significant amounts of USD Coin (USDC), Wrapped Bitcoin (WBTC), and Ether (ETH). The hackers moved quickly to liquidate portions of their theft, particularly targeting UXLINK’s native tokens for immediate sale.
The hack triggered massive selling pressure that sent UXLINK’s token into free fall. Trading volume spiked by more than 1,700% as both the original attackers and panicked investors rushed to exit their positions. Market capitalization dropped from previous levels to reflect investor concerns about the platform’s security and future viability.
UXLINK, which launched in 2023 as an artificial intelligence-powered social infrastructure project for Web3 ecosystems, now faces significant challenges in restoring user confidence.
The company acknowledged the breach in official statements, saying teams are “working around the clock with both internal and external security” personnel to address the situation. However, the extent of the damage to the platform’s total asset base remains unclear.
Consumer trust represents perhaps the most significant casualty in cryptocurrency security breaches. While stolen tokens can theoretically be replaced through various recovery mechanisms, rebuilding user confidence typically requires extensive time and demonstrated security improvements.
The rapid market response suggests investors view this incident as particularly serious given UXLINK’s relatively recent market entry.
Multi-signature wallets require multiple private keys to authorize transactions, typically involving three to five separate parties who must agree before funds can be moved. The addOwnerWithThreshold function allows existing wallet owners to add new authorized users, but should be protected against unauthorized access. DelegateCall represents a programming function that enables smart contracts to execute code from other contracts while maintaining the original contract’s storage context.
Centralized exchanges (CEXs) operate traditional trading platforms with corporate oversight, while decentralized exchanges (DEXs) facilitate peer-to-peer trading through automated protocols. USDT and USDC represent stablecoin cryptocurrencies designed to maintain values pegged to the U.S. dollar. Wrapped Bitcoin (WBTC) allows Bitcoin to function within Ethereum-based systems through tokenization protocols.
The $11.3 million UXLINK hack highlights ongoing security vulnerabilities in Web3 infrastructure despite advances in multi-signature wallet technology. The incident’s immediate market impact demonstrates how quickly investor confidence can erode when platforms experience major security breaches, particularly for newer projects still establishing their reputations in the competitive cryptocurrency space.
