← UPCX1 decision on this page
Audit log
Every state-changing event for UPCX: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions carry three independent witnesses — the original source, an Internet Archive snapshot taken at submission time, and a Solana memo signed by our publicly-disclosed publisher key.
- #1publishby system:backfill2026-05-28 20:25:00ZScore: ? → ? (no score change)anchoranchored
- chain
- ●mainnet-betaslot 422,792,435
- sig
4hLk8jUvw4i2…qJynbYnVexplorer ↗- hash
9jxz8Togm5LV…SH2mSw6Csha256 → base58
verifying row…full verify ↗canonical bytes (4139 B) ▸
{"actor":"system:backfill","investigation_id":"92255638-c0e0-4934-b6c1-4fba5bd21afc","kind":"publish","page_slug":"upcx","published_at":"2026-05-28T20:25:00.853Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"UPCX","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.globenewswire.com/news-release/2025/03/21/3047070/0/en/UPCX-From-Japanese-Compliance-to-Global-Expansion.html","type":"other","url":""},{"credibility":3,"name":"https://www.globenewswire.com/news-release/2025/03/17/3043770/0/en/UPCX-UPC-to-Launch-on-Japanese-Crypto-Trading-Platform-BitTrade.html","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-upcx-hack-april-2025","type":"other","url":""},{"credibility":3,"name":"https://cryptoslate.com/upcx-halts-transactions-after-70-million-hack-exposes-vulnerabilities/","type":"other","url":""},{"credibility":3,"name":"https://coinjournal.net/news/blockchain-payments-platform-upcx-exploited-for-70m/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-upcx-hack-april-2025","type":"other","url":""},{"credibility":3,"name":"https://skynet.certik.com/projects/upcx","type":"other","url":""},{"credibility":3,"name":"https://blog.ueex.com/crypto-hacks/upcx-hack/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.globenewswire.com/news-release/2025/03/17/3043770/0/en/UPCX-UPC-to-Launch-on-Japanese-Crypto-Trading-Platform-BitTrade.html","type":"other","url":""},{"credibility":3,"name":"https://coinmarketcap.com/academy/article/hacker-steals-dollar70-million-in-upc-tokens-after-gaining-control-of-upcx-smart-contract","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.globenewswire.com/news-release/2025/03/21/3047070/0/en/UPCX-From-Japanese-Compliance-to-Global-Expansion.html","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.globenewswire.com/news-release/2025/07/15/3115534/0/en/UPCX-Staking-Surpasses-975-000-Tokens-as-Web3-Payment-Ecosystem-Accelerates-Expansion.html","type":"other","url":""},{"credibility":3,"name":"https://finance.yahoo.com/news/hacker-steals-70-million-upc-214926542.html","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://skynet.certik.com/projects/upcx","type":"other","url":""},{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-upcx-hack-april-2025","type":"other","url":""}]}],"sources_used":[],"summary":"UPCX is a blockchain payment protocol that suffered a $70 million exploit on April 1, 2025, when an attacker compromised an administrative private key and used it to push a malicious smart contract upgrade, draining 18.4 million UPC tokens from management accounts. The attack was enabled by the absence of multisig controls on privileged protocol functions, despite having undergone CertiK and Cyberscope audits that did not catch the operational key management risk. Despite listing on a Japanese FSA-licensed exchange just 11 days prior, no recovery of stolen funds was reported.","timeline":[{"date":"2025-03-17","event":"UPCX announces listing on BitTrade, a Japanese FSA-licensed exchange.","source":""},{"date":"2025-03-27","event":"UPCX UPC token goes live on BitTrade exchange in Japan.","source":""},{"date":"2025-04-01","event":"Attacker compromises admin private key, pushes malicious ProxyAdmin upgrade, drains ~18.4M UPC (~$70M) from three management accounts.","source":""},{"date":"2025-04-01","event":"Cyvers detects the exploit; UPCX halts all transactions and announces investigation.","source":""},{"date":"2025-07-15","event":"UPCX press release reports staking activity resuming, surpassing 975,000 tokens. Stolen funds unrecovered.","source":""}]},"v":1}Verify offline (run on your own machine)python -m src.verify_decision b40d9441-bde8-485f-acee-c82086b8cb9d
How verification works. The “Row integrity” check above is computed in your browser — your machine recomputes the SHA-256 of the canonical bytes and compares against the stored hash. No avoid.net server can fake that check. The “full verify” link goes one level deeper: your browser fetches the on-chain transaction from a Solana RPC node and confirms the same hash is in the memo. If you don’t want to trust either avoid.net or the public RPC, run the CLI verifier on your own machine —
python -m src.verify_decision <event_id>.