UPCX, a decentralized payment platform, has suffered a significant security breach, resulting in the unauthorized transfer of approximately $70 million worth of its native UPC tokens. The incident, which was flagged by blockchain security firm Cyvers, highlights ongoing vulnerabilities in the cryptocurrency sector.
Key Takeaways
-
UPCX lost $70 million in UPC tokens due to a security breach.
-
The hacker exploited a vulnerability in the ProxyAdmin contract.
-
UPCX has suspended all deposits and withdrawals as a precaution.
-
The incident has raised concerns about security in the Web3 space.
Overview Of The Incident
On April 1, 2025, UPCX reported that an unauthorized party had accessed its management accounts, leading to the withdrawal of 18.4 million UPC tokens. The hacker managed to upgrade the ProxyAdmin contract, which allowed them to execute a function that facilitated the transfer of funds from three different management wallets.
According to Cyvers, the security firm that detected the breach, the attacker executed the withdrawByAdmin function, which is typically reserved for administrative purposes. This exploit allowed the hacker to drain a significant portion of UPCX's total token supply, valued at around $70 million at the time of the attack.
Immediate Response
In response to the breach, UPCX took swift action by:
-
Suspending all deposits and withdrawals on the platform.
-
Issuing a statement to reassure users that their assets were safe and that an investigation was underway.
-
Engaging with cybersecurity experts to analyze the breach and prevent future incidents.
Impact On UPC Token
Following the news of the hack, the price of UPC tokens experienced a sharp decline. The token fell approximately 7%, dropping from around $4.06 to a low of $3.77. This decline reflects the market's reaction to the security breach and the uncertainty surrounding the platform's future.
Broader Implications For The Crypto Industry
This incident serves as a stark reminder of the vulnerabilities that exist within the cryptocurrency and decentralized finance (DeFi) sectors. Experts have noted that such breaches often stem from compromised credentials or flawed access control mechanisms. In fact, these vulnerabilities have been responsible for over 80% of the stolen funds in the Web3 space in recent years.
Meir Dolev, co-founder and CTO of Cyvers, emphasized the need for enhanced security measures, including:
-
Improved wallet permissions.
-
Implementation of multisignature protocols.
-
Rigorous transaction validation processes.
Conclusion
As the investigation into the UPCX hack continues, the incident underscores the ongoing challenges faced by blockchain platforms in securing user assets. With the hacker's wallet still holding the stolen UPC tokens, the crypto community remains on high alert, awaiting further developments. The UPCX team is committed to restoring trust and ensuring the security of its platform as it navigates this crisis.
Sources
-
Blockchain payments platform UPCX exploited for $70m, CoinJournal.
-
Hacker transfers $70M out of payment platform UPCX, Cointelegraph.
-
Latest Crypto Exploit Hackers Steal $70M From Payment Platform UPCX, The Crypto Times.
-
UPCX Official loses $70M in UPC tokens after unauthorized smart contract access, Cryptopolitan.
-
Hacker transfers $70M out of payment platform UPCX — TradingView News, TradingView.
This article was created with support from AI-driven technology, drawing on multiple reputable sources. The final content has been thoroughly reviewed and edited by BlockzHub's editorial team to ensure accuracy, clarity, and coherence. Original reporting sources are credited whenever appropriate and as required. The opinions expressed in this article do not necessarily represent the official views or positions of BlockzHub. This article is intended for informational purposes only and should not be considered financial or professional advice. Investing involves risk, and you should consult a qualified financial advisor before making any investment decisions.