UXLINK suffered a significant security breach on September 22, 2025, resulting in the theft of over $11 million in assets. Attackers employed deepfake video conferencing to impersonate business partners, allowing them to infiltrate key holders' devices. This breach enabled unauthorized control over the old arb-UXLINK smart contract, leading to illicit token issuance and transfers. In response, UXLINK has engaged law enforcement and collaborated with exchange partners to recover some of the stolen assets. The company is actively working to restore 479 million tokens and has committed to transparency throughout the process. UXLINK has denied any internal negligence and plans to reimburse affected users through a token unlocking mechanism, contingent on governance voting.