UXLINK suffered a significant security breach on September 22, 2025, resulting in the theft of over $11 million in assets. Attackers utilized deepfake video conferencing to impersonate business partners, gaining access to key holders' devices. This allowed them to control the old arb-UXLINK smart contract, leading to unauthorized token issuance and transfers. In response, UXLINK has involved law enforcement and collaborated with exchange partners to recover some of the stolen assets. The company is actively working to restore 479 million tokens and has committed to transparency throughout the process. UXLINK denies any internal negligence and plans to reimburse affected users through a token unlocking mechanism, contingent on governance voting.