The recent UXLINK hack has sent shockwaves through the crypto community, with the attacker still active and shuffling their ill-gotten gains. The hacker recently made a move to convert approximately $6.8 million worth of ETH into DAI stablecoins, marking a significant attempt to cash out the stolen assets.
This latest development comes on the heels of the attacker’s extensive efforts to obfuscate the trail of the stolen funds. By moving assets across multiple wallets and utilizing both centralized and decentralized exchanges, the hacker has been attempting to launder the stolen assets and cover their tracks.
However, in a surprising turn of events, the attacker fell victim to a phishing attack while moving the stolen tokens. Security researchers discovered that the hacker unknowingly granted approval to a malicious contract controlled by the Inferno Drainer group, resulting in the loss of 542 million UXLINK tokens, valued at approximately $43 million at the time.
Despite this setback, the attacker is still believed to be holding onto millions in various assets, indicating that they may have more moves planned in the future.
The UXLINK hack itself was a sophisticated exploit that targeted the project’s multi-signature wallet through a delegate call vulnerability. This allowed the attacker to gain administrator-level access, enabling them to make unauthorized transfers and mint fake tokens on a large scale.
In response to the hack, UXLINK has taken decisive action by finalizing a new smart contract audit and preparing for a token migration. The audit focused on enhancing security measures and tightening controls around multisig wallets and contract interactions to prevent similar exploits in the future.
The ongoing asset shuffling and conversion efforts by the hacker have added a layer of complexity to the situation, making it uncertain whether the stolen funds can be fully recovered. It remains to be seen how the situation will unfold in the coming days and whether the attacker will make further moves to liquidate their illicit gains.