A wallet potentially linked to the 2025 UXLINK hack showed approximately $6.54 million in unrealized gains on a leveraged Ethereum position, based on data circulated on October 27, 2026. The connection to the attacker has not been conclusively established.

Key Takeaways

  • The Hyperliquid position had a notional value of about $71.17 million and exposure to roughly 30,282 ETH.
  • The reported gain was unrealized, while earlier completed trades reportedly generated about $5.71 million in separate realized gains.

What the Ethereum position shows

On-chain analyst Yu Jin, also known as Ember, identified the position on decentralized perpetual futures exchange Hyperliquid. It had an average entry price of $2,134.45 per ETH and a notional value of approximately $71.17 million.

The account began trading on Hyperliquid in early August 2026 after consolidating roughly 11.54 million to 11.55 million USDC from multiple sources. It subsequently made six Ethereum trades, five of which reportedly produced profits.

A perpetual futures position provides exposure to price movements without requiring ownership of the full underlying amount. The position therefore does not establish that the wallet owns 30,282 ETH outright. Its precise leverage ratio, liquidation threshold and current collateral balance were not established.

Why the UXLINK hack connection is uncertain

Yu Jin identified a transaction pattern involving an address associated with funding the trading position and an address previously identified with the UXLINK attacker. Both sent remaining ETH used for transaction fees to the same recipient wallet on the same day. That overlap suggests a possible link, but does not prove common ownership or that all funds supporting the position came from stolen assets.

The UXLINK breach occurred on September 22, 2025, with estimated losses of approximately $40 million. Attackers also minted unauthorized tokens. In its security notices, UXLINK acknowledged unauthorized minting and described a token migration response; the notices do not establish a connection to the 2026 trading account.

The $6.54 million gain could change before the position is closed, and it does not establish an equivalent additional loss for victims of the original breach.

Read More News

More FinanceVelix news

Disclaimer

This FinanceVelix article provides general information, not personalized financial, investment, legal, or tax advice. Market prices, interest rates and economic conditions can change; investments carry a risk of loss. Facts reflect the material available when published and may change. Check important information independently and consult a qualified professional when needed. Mentioning an asset, company, or service is not an endorsement.