- UPCX, a payment platform, suffered a cyberattack resulting in the loss of $70 million worth of UPC tokens.
- The attacker manipulated the ProxyAdmin settings to access management accounts and withdraw 18.4 million UPC tokens.
- UPCX has temporarily suspended deposits and withdrawals, ensuring that user assets remain unaffected.
- The incident caused the UPC token price to drop from $4.02 to $3.77.
- Experts attribute the attack to compromised credentials or inadequate access control measures.
Cybersecurity Breach: UPCX Payment Platform Loses $70 Million
In a significant cybersecurity breach, the payment platform UPCX experienced a loss of $70 million due to hacker activities. This breach underscores vulnerabilities in the rapidly evolving cryptocurrency market, emphasizing the necessity for robust security measures.
Anatomy of the Attack
The attacker successfully accessed and altered ProxyAdmin settings, gaining unauthorized entry into management accounts. This manipulation allowed them to execute functions that resulted in the theft of 18.4 million UPC tokens. Cyvers Alerts identified multiple suspicious transactions linked to this event, spotlighting an address where unauthorized upgrades occurred.
Response and Market Impact
In response to this breach, UPCX promptly halted all deposit and withdrawal operations as a precautionary measure while assuring users their assets remained secure. Despite these assurances, market confidence was shaken; CoinMarketCap data shows that the price of UPC tokens fell from $4.02 to $3.77 before slightly recovering.
Expert Analysis and Recommendations
Cyvers experts suggest this attack might have stemmed from compromised login credentials or insufficient access controls—a scenario common among Web3 projects in 2024, accounting for 80% of related losses. Meir Dolev from Cyvers highlights these vulnerabilities as critical risk factors for similar incidents.
Security specialists recommend strengthening protection mechanisms by implementing multi-signature protocols and transaction verification processes. Such enhancements could mitigate risks associated with administrative rights exploitation—a tactic frequently employed by cybercriminals.
Comparative Cybercrime Landscape
This incident’s financial toll exceeds previous monthly losses recorded in March 2025 when total stolen crypto-assets amounted to $33 million according to PeckShield reports. The magnitude of this breach calls for urgent attention towards securing digital asset platforms against escalating threats.
Overall, while swift action mitigated user impact during this crisis, it serves as a stark reminder of ongoing challenges faced within decentralized finance ecosystems where vigilance remains paramount against sophisticated cyberattacks targeting cryptocurrencies globally.
