Ethereum (ETH), Solana (SOL), and XRP Hit by $148 Million Crypto Thief Selloff

51Importance
updatingStatus
2News media
Published
Updated

A wallet linked to the UXLINK exploiter started closing about $148 million in leveraged long positions on Hyperliquid. Separate coverage also says the hacker dumped $148 million in Ethereum, Solana, and XRP at a loss.

Key claims & sources

✓
The UXLINK hacker sold $148 million in Ethereum, Solana, and XRP at a loss.
✓
The assets named in that selloff were Ethereum, Solana, and XRP.
✓
A wallet tied to the UXLINK exploiter began closing roughly $148 million in leveraged long positions on Hyperliquid.
✓
EmberCN-linked monitoring said the closing program was set up with a TWAP tool over 16 hours.

What it means

UXLINK is a crypto project whose name has already been tied to an exploiter in on-chain tracking, and Hyperliquid is the venue where leveraged positions were opened and then reduced. The update lands after those positions were already in place, so the key issue is not a new trade but the unwinding of an existing one. For readers, that frames this as an after-the-fact cleanup of exposure rather than a fresh build-up of risk.

Hyperliquid users watching this position can see a large trader exit a set of leveraged longs across ETH, SOL, and XRP in a staged way rather than all at once. That kind of unwind can change order flow on the venue and can also show how quickly borrowed exposure can be reduced when a large position is under pressure. It also highlights how a wallet associated with an exploit can still move through mainstream trading infrastructure.

The larger issue is the overlap between exploit-linked funds, leverage, and public blockchains: transfers and trades remain visible, but visibility does not prevent rapid repositioning. ETH, SOL, and XRP are all liquid markets, yet a single wallet can still move a very large amount through them in a way that is easy to track and hard to ignore. That tension sits at the center of crypto market structure, where open infrastructure makes surveillance possible but also leaves room for fast risk migration. (per u.today)

Market reaction i

EthereumETH it is the asset of the company or protocol in the event

Ethereum rose 0.2% in the 4 hours after the first headline, after rising 0.2% in the 2 hours before.

$2,123 price at the headline
+0.2% 2 h before
+0.2% 4 h after
+0.3% 12 h after
First headline

48 prices, one every 30 minutes

Coverage timeline

Every piece in order, with the time its news medium declares — if it is not believable we use ours and say so — and what it added to what was already known at that point. Arriving first is not the same as adding something.

first
Nov 9 13:05
+3 d 1 h
Nov 12 14:22
The Cryptocurrency Post context
Its angle: hyperliquid, dg3fgxwgvz, blzju3p6hn; with quotes

Thefts of a similar size

WhenWhat happenedFigure
4.9 years ago BitMart · Wallet stolen incident $150M
6.1 years ago KuCoin · Wallet stolen incident $150M
9.0 years ago Parity · 'Accidentally killed It' incident $150M
5.1 years ago Compound V2 · Arithmetic Error incident $147M
5.5 years ago Venus · Lack of liquidity incident $145M

4302 incidents stored · 52 were as large as this one or larger ($148M)

What could happen next i