UXLINK Exploit May Expose Multisig and Smart Contract Centralization Risks on Ethereum

Binance 20% Trading Fee Rebate

  • Multisig compromise enabled mass minting, slashing UXLINK value.

  • Project deployed a new audited Ethereum contract and removed mint-burn functionality.

  • Estimated losses range from ~$11M to over $30M; security hardening recommended.

UXLink exploit coverage: multisig breach, estimated losses, new contract fixes and practical smart-contract hardening steps. Read how projects can secure tokens now.

FearsOff CEO Marwan Hachem said the incident underscores the risk of retaining centralized control in projects that present themselves as decentralized.

‘,

πŸš€ Advanced Trading Tools Await You!
Maximize your potential. Join now and start trading!

‘,

πŸ“ˆ Professional Trading Platform
Leverage advanced tools and a wide range of coins to boost your investments. Sign up now!


];

var adplace = document.getElementById(“ads-bitget”);
if (adplace) {
var sessperindex = parseInt(sessionStorage.getItem(“adsindexBitget”));
var adsindex = isNaN(sessperindex) ? Math.floor(Math.random() * adscodesBitget.length) : sessperindex;
adplace.innerHTML = adscodesBitget[adsindex];
sessperindex = adsindex === adscodesBitget.length – 1 ? 0 : adsindex + 1;
sessionStorage.setItem(“adsindexBitget”, sessperindex);
}
})();

Decentralized social platform UXLink said Wednesday it deployed a new Ethereum contract after a multisignature wallet exploit allowed attackers to mint billions of unauthorized tokens and collapse the native token’s market value.

UXLink confirmed the new smart contract passed a security audit and will go live on the Ethereum mainnet. The replacement contract removes the mint-burn function to eliminate the risk of arbitrary supply expansion.

The project confirmed the breach on Tuesday and said a significant amount of crypto was moved to exchanges. Loss estimates vary by source: Cyvers Alerts reported at least $11 million stolen, while security firm Hacken estimated losses in excess of $30 million.

‘,

πŸ”’ Secure and Fast Transactions
Diversify your investments with a wide range of coins. Join now!

‘,

πŸ’Ž The Easiest Way to Invest in Crypto
Dont wait to get started. Click now and discover the advantages!


];

var adplace = document.getElementById(“ads-binance”);
if (adplace) {
var sessperindex = parseInt(sessionStorage.getItem(“adsindexBinance”));
var adsindex = isNaN(sessperindex) ? Math.floor(Math.random() * adscodesBinance.length) : sessperindex;
adplace.innerHTML = adscodesBinance[adsindex];
sessperindex = adsindex === adscodesBinance.length – 1 ? 0 : adsindex + 1;
sessionStorage.setItem(“adsindexBinance”, sessperindex);
}
})();

The UXLink exploit was a multisignature wallet compromise that allowed attackers to execute a delegate call vulnerability, take administrative control and mint billions of UXLINK tokens, causing the token price to fall roughly 90% from $0.33 to $0.033.

According to analysis and expert commentary, the breach exploited a delegate call vulnerability inside the multisig setup. That weakness permitted arbitrary code execution and effectively bypassed intended signer controls, enabling unauthorized minting and administrative actions.

Estimates differ: Cyvers Alerts reported at least $11 million in stolen funds, while security firm Hacken estimated losses exceeding $30 million. The attacker initially minted approximately 2 billion UXLINK tokens and, by some estimates, created nearly 10 trillion tokens overall, driving a severe market crash.

Expert Marwan Hachem of FearsOff pointed to design flaws: a multisignature wallet not hardened against delegate call exploits, lax mint controls and no code-enforced supply cap. Those gaps allowed centralized privileges to be abused once the multisig was compromised.


];

var adplace = document.getElementById(“ads-htx”);
if (adplace) {
var sessperindex = parseInt(sessionStorage.getItem(“adsindexHtx”));
var adsindex = isNaN(sessperindex) ? Math.floor(Math.random() * adscodesHtx.length) : sessperindex;
adplace.innerHTML = adscodesHtx[adsindex];
sessperindex = adsindex === adscodesHtx.length – 1 ? 0 : adsindex + 1;
sessionStorage.setItem(“adsindexHtx”, sessperindex);
}
})();

Source: https://en.coinotag.com/uxlink-exploit-may-expose-multisig-and-smart-contract-centralization-risks-on-ethereum/