Tools Crypto Exploit Tracker exploit-0121
Exploit record
UPCX ProxyAdmin Take-Over
- Loss
- $70M
- Attack vector
- Access Control
- Chain
- Ethereum
- Sector
- Token
What happened
On April 1, 2025, a hijacked ProxyAdmin let attackers insert malicious logic and drain about $70M worth of UPC tokens.
Proxy upgrade power is effectively absolute power. Once lost, every downstream assurance becomes theatre.
Sources
- Halborn analysiswww.halborn.com/blog/post/explained-the-upcx-hack-april-2025
One record from the Crypto Exploit Tracker, maintained by the Security Desk. Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 15 September 2026