UXLink - Rekt

UXLINK's treasury was drained of roughly $18 million across Ethereum and BSC after someone with multisig access used delegateCall to remove the admins and install themselves as owner. Blockscope's forensics put the attacker's total realized proceeds, including proceeds from minting unauthorized UXLINK tokens on Arbitrum, at about $41 million as of September 25th. Separately, Scam Sniffer flagged a phishing transaction in which 542 million UXLINK tokens were drained from the attacker's wallet into addresses linked to Inferno Drainer.