Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.
anchored·4hLk8j…bYnVSummary
UPCX is a blockchain payment protocol that suffered a $70 million exploit on April 1, 2025, when an attacker compromised an administrative private key and used it to push a malicious smart contract upgrade, draining 18.4 million UPC tokens from management accounts. The attack was enabled by the absence of multisig controls on privileged protocol functions, despite having undergone CertiK and Cyberscope audits that did not catch the operational key management risk. Despite listing on a Japanese FSA-licensed exchange just 11 days prior, no recovery of stolen funds was reported.
Connected Entities
1 entitiesTimeline(5 events)
17 March 2025
UPCX announces listing on BitTrade, a Japanese FSA-licensed exchange.
27 March 2025
UPCX UPC token goes live on BitTrade exchange in Japan.
April 2025
Attacker compromises admin private key, pushes malicious ProxyAdmin upgrade, drains ~18.4M UPC (~$70M) from three management accounts.
April 2025
Cyvers detects the exploit; UPCX halts all transactions and announces investigation.
15 July 2025
UPCX press release reports staking activity resuming, surpassing 975,000 tokens. Stolen funds unrecovered.
Decision Log
- hash: 9jxz8Togm5LV9MDYXTWBQJR9njrgR4WCEaQnSH2mSw6C
This investigation is cryptographically anchored to the Solana blockchain (1 event). 8 of 10 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-5
generated: 5/4/2026, 2:54:24 AM
last updated: 8/29/2026, 11:26:12 PM
avoid.net — verified advice for a post-truth world