PANews reported on December 9th that UXLINK CEO RollandSaf released a security incident review report, stating that the company suffered a total loss of over $11 million in the asset theft incident on September 22nd. He emphasized that the incident was not caused by internal factors within the project team, stating that attackers, by impersonating business partners and utilizing deepfake video conferencing, breached the personal devices of multiple SAFE authorized key holders over several months, stealing sensitive information such as passwords and private keys, and ultimately gaining control of the old version of the arb-UXLINK smart contract. The hackers then illegally issued new tokens, transferred, and sold assets.
RollandSaf stated that the hackers exploited compromised personal devices, not the UXLINK system. They used sophisticated impersonation and deepfake techniques. The team immediately filed criminal reports in multiple jurisdictions, including Asia, Europe, and the United States, upon the attack. Through immediate communication with exchanges, millions of dollars have been recovered, all of which were used for buybacks to support community development. Furthermore, significant security upgrades have been implemented to signing devices, internal processes, and systems to prevent similar incidents from recurring. The DAO passed a proposal to unlock an additional 12% supply in advance to help compensate users who purchased during the hack and illegal minting. All major exchanges have received corresponding compensation.
