On-chain analyst Yu Jin identified a wallet, suspected of belonging to the UXLINK hacker, holding a long position of 30,282 to 30,300 ETH on the decentralized exchange Hyperliquid. The position was opened at an average entry price of $2,134, giving it a notional value of approximately $70.25 million.

As of October 27, 2026, the unrealized gains on this position are estimated between $5.62 million and $6.54 million. The wallet has been active since August 2026 and has previously completed six profitable Ethereum trades on the same platform, realizing $5.71 million in profit.

The analyst linked the wallet to the UXLINK exploit through fund movements, specifically the consolidation of $11.54 million in USDC used to fund the ETH position, and shared gas-fee activity with known hacker addresses. The UXLINK exploit occurred on September 22, 2025, resulting in estimated losses of $40 million to $48 million.

The attacker exploited a delegateCall vulnerability to gain control of the project's multisig wallet, minting trillions of unauthorized tokens. This caused the token price to drop by 70% to 99% and halted project operations. No owner of the trading wallet has been publicly confirmed.