UXLINK Hacker Sells $11.8M ETH as Trading Shows Limited Gains

• UXLINK exploiter swaps 5,496 ETH for $11.8M DAI, securing short-term profit amid volatility.
• Portfolio remains concentrated in DAI and WBTC, with total holdings near $36.65M.
• Cumulative losses exceeded $4M in Feb 2026, followed by a March recovery but no sustained profitability.

The wallet tied to the UXLINK exploit has continued to rotate funds months after the initial breach, with recent activity showing a large Ethereum sale into stablecoins alongside a trading record marked by volatility and limited net gains.

On-chain data indicates that the exploiter converted a large portion of ETH holdings into DAI, while portfolio metrics and historical performance show the entity has struggled to generate consistent profits despite active trading since late 2025.

ETH Liquidation Shows Ongoing Fund Movement

Recent transactions show the UXLINK exploiter sold 5,496 ETH for approximately $11.8 million in DAI through CoWSwap, with an average execution price near $2,150. Blockchain analytics firm Lookonchain reported the trade generated an estimated $935,000 profit.

The transaction follows earlier alerts from PeckShieldAlert, which traced the funds back to the September 22, 2025, breach of UXLINK’s multisignature wallet, which resulted in losses exceeding $44 million.

Portfolio Data Shows Concentration in DAI and WBTC

Arkham data puts the exploiter’s total portfolio value at around $36.65 million, reflecting a marginal 0.18% decline. The largest allocation remains in DAI, with 22.358 million tokens valued at $22.36 million. The second-largest holding consists of 202.773 WBTC, valued at approximately $14.27 million.

The wallet also contains 6.642 ETH, valued at $14,200, 699,799 XOXO tokens, worth $70.9, along with several tokens holding only minimal value.

Trading History Records Repeated Drawdowns

A profit-and-loss chart from Arkham outlines trading activity from October through March 2026, highlighting ongoing fluctuations. Early losses in October and November pushed cumulative performance toward a negative $2 million before stabilizing. 

Losses deepened into early 2026, with cumulative drawdowns surpassing negative $4 million in February, marking the lowest point in the observed period. While March data shows improved daily performance and a rebound in cumulative results, the overall pattern shows repeated losses and recoveries without sustained profitability.

Related: Crypto Hackers Use LLMs to Scan EVM Contracts for Vulnerabilities