UXLink Exploiter Converts 248 WBTC to 23 Million DAI in Ongoing Asset Movement

According to PeckShield, the address linked to the UXLink attacker exchanged 248 WBTC for 23 million DAI within one hour, continuing efforts to liquidate stolen assets from the September 22, 2025 hack.

ETH
USDT
USDC

Summary

PeckShield reported that an address associated with the UXLink exploiter swapped 248 WBTC for 23 million DAI within one hour. The transaction represents continued asset movement following the September 22, 2025 breach, where attackers exploited a delegateCall vulnerability in UXLink's multi-signature wallet to steal over $11 million in assets and mint billions of unauthorized tokens. The hack resulted in losses estimated between $11.3 million and $30 million, with approximately $4 million in USDT, $500,000 in USDC, 3.7 WBTC, and 25 ETH initially stolen, plus approximately 10 trillion minted UXLINK tokens sold for around $28 million in ETH.

Terms & Concepts
  • WBTC: Wrapped Bitcoin, a tokenized representation of Bitcoin on the Ethereum blockchain, allowing BTC to be used in decentralized applications.
  • DAI: A decentralized stablecoin pegged to the US dollar, commonly used in DeFi transactions and as a store of value.
  • DelegateCall: A function in smart contracts that allows one contract to execute code from another while maintaining the caller's context, which can be exploited if improperly secured.