Skip to main content
AVOID.NET

UPCX

avoid.net/upcx→10/100·82% conf.
[AI-DRAFTED · AWAITING FACT-CHECK][src:defillama]

Last changed 2026-11-02 · Fact-check review — Fact-check review (verdict: revise): the reviewer checked the page's claims against its sources; the judge moved the trust score from 28 to 10. Version history →

Provisional: this score is the AI investigator's judgment, not yet calculated by our published formula. Treat it as indicative. How scoring works →

anchored·4hLk8j…bYnV

Summary

UPCX is a blockchain payment protocol that suffered a $70 million exploit on April 1, 2025, when an attacker compromised an administrative private key and used it to push a malicious smart contract upgrade, draining 18.4 million UPC tokens from management accounts. The attack was enabled by the absence of multisig controls on privileged protocol functions, despite having undergone CertiK and Cyberscope audits that did not catch the operational key management risk. Despite listing on a Japanese FSA-licensed exchange just 11 days prior, no recovery of stolen funds was reported.

Connected Entities

3 entities · 60 linked investigations
Organizations
Relationships
  • UPCX→mentioned with→Ethereum(70%)
  • UPCX→mentioned with→ZachXBT(65%)
  • ZachXBT→mentioned with→Ethereum(70%)
Have evidence about UPCX?

Timeline(5 events)

17 March 2025

UPCX announces listing on BitTrade, a Japanese FSA-licensed exchange.

27 March 2025

UPCX UPC token goes live on BitTrade exchange in Japan.

April 2025

Attacker compromises admin private key, pushes malicious ProxyAdmin upgrade, drains ~18.4M UPC (~$70M) from three management accounts.

April 2025

Cyvers detects the exploit; UPCX halts all transactions and announces investigation.

15 July 2025

UPCX press release reports staking activity resuming, surpassing 975,000 tokens. Stolen funds unrecovered.

Provenance & Audit Trail

Decision Log

  • #3review revise-18Recorded on Solana ✓11/2/2026, 4:15:33 AM
    slot 464357329 · hash BvQjLzBGf9hUft73fgDin64F5cxAZ15b2ESynuZirVpE
  • #2reviewRecorded on Solana ✓11/2/2026, 4:15:33 AM
    slot 464357323 · hash 5dgFuNXeTgwSxcLd72Tz9aZgGnDykueHXdr842j5YKfd
  • #1publishRecorded on Solana ✓5/28/2026, 8:25:00 PM
    slot 422792435 · hash 9jxz8Togm5LV9MDYXTWBQJR9njrgR4WCEaQnSH2mSw6C

This investigation is cryptographically anchored to the Solana blockchain (3 decisions). 9 of 10 cited source URLs have an Internet Archive snapshot.

Fact-checked 2026-11-0212 claims checked2 corrections pending0 applied⛓ anchoredSee findings →

model: claude-sonnet-4-5

generated: 5/4/2026, 2:54:24 AM

last updated: 11/2/2026, 4:15:33 AM

5 views

avoid.net — verified advice for a post-truth world