UPCX Suspends Trading After Significant Unauthorized Activity

From Quadriga Initiative Cryptocurrency Hacks, Scams, and Frauds Repository
Jump to navigation Jump to search

Notice: This page is a freshly imported case study from an original repository. While the original content had a similar format, some sections may not have been fully completed. Please help fill in any empty sections or any missing information you can find. If you are new here, please read General Tutorial on Wikis or Anatomy of a Case Study for help getting started.

Notice: This page contains sources which are not attributed to any text. The unattributed sources follow the initial description. Please assist by visiting each source, reviewing the content, and placing that reference next to any text it can be used to support. Feel free to add any information that you come across which isn't present already. Sources which don't contain any relevant information can be removed. Broken links can be replaced with versions from the Internet Archive. See General Tutorial on Wikis, Anatomy of a Case Study, and/or Citing Your Sources Guide for additional information. Thanks for your help!

UPCX

UPCX is a decentralized, open-source payment network that leverages smart contracts to offer fast, scalable, and user-friendly blockchain payments. It supports familiar payment methods, cross-currency transactions, and customizable privacy while aiming to build a full-featured blockchain financial ecosystem. UPCX recently reported unauthorized activity involving 18.47 million UPCX tokens (valued at over $72 million). While no funds were lost, deposits and withdrawals remain suspended on some exchanges as protocol security evaluations continue for more than a month.[1][2][3][4][5][6][7][8][9][10][11][12][13][14]

About UPCX Network

UPCX is an open-source, decentralized payment network that integrates smart contracts to make blockchain-based payments accessible and user-friendly. It offers high performance, supporting faster transaction finality and greater throughput than existing solutions, while remaining cost-effective and environmentally sustainable.

The platform focuses on delivering a familiar payment experience by supporting named accounts, NFC and QR code payments, offline functionality, and non-custodial escrow with multi-signature options. It also enables instant cross-currency transactions through a decentralized exchange and supports customizable privacy settings that comply with legal standards.

UPCX expands beyond simple payments by incorporating features such as asset issuance, decentralized trading, and cross-chain functionality. It supports stablecoins backed by real-world assets, user-created tokens, and non-fungible assets, aiming to build a full-featured blockchain-based financial ecosystem.

Technologically, UPCX uses an enhanced version of Graphene blockchain technology combined with Delegated Proof of Stake and Byzantine Fault Tolerance. This enables up to 100,000 transactions per second, low costs, and rapid transaction finality.

The project has established various partnerships in finance, entertainment, and technology and was named the official blockchain payment sponsor for the World Aquatics, reflecting its ambition to lead in the digital payments space.

The Reality

This sections is included if a case involved deception or information that was unknown at the time. Examples include:

  • When the service was actually started (if different than the "official story").
  • Who actually ran a service and their own personal history.
  • How the service was structured behind the scenes. (For example, there was no "trading bot".)
  • Details of what audits reported and how vulnerabilities were missed during auditing.

What Happened

18,473,280 UPCX were reportedly moved without authorization.

Key Event Timeline - UPCX Suspends Trading After Significant Unauthorized Activity
Date Event Description
April 1st, 2025 4:57:00 AM MDT UPCX Posts Announcement The UPCX team posts an announcement about "identif[ying] unauthorized activity".
April 2nd, 2025 9:49:00 AM MDT UPCX Staking Platform Online UPCX announces that the staking platform remains online. However, "UPCX does not encourage users to stake at this time as we conduct internal assessments".
April 4th, 2025 2:59:00 AM MDT UPCX Confirms Control UPCX confirms that they retain control over the 18,473,290 UPC, and will be transferring it at 9:00 AM UTC.
April 4th, 2025 3:05:23 AM MDT UPCX Transfers Funds The at risk UPCX is reportedly transferred by the project team.
April 4th, 2025 3:55:00 AM MDT UPCX Announces Transfer UPCX announces the transfer restoring the funds on Twitter/X.
May 7th, 2025 9:10:00 AM MDT UPCX Announces Suspension UPCX announces the suspension of deposits and withdrawals on some exchanges. Some users mention that their deposits and withdrawals are still blocked on certain exchanges for over a month.

Technical Details

There was reportedly unauthorized activity involving 18,473,280 UPCX. The exact details of what happened have not been disclosed.

Total Amount Lost

A total of 18,473,280 UPCX were at risk. No funds have been lost.

3.9035 * 18,473,280 UPCX = $72,110,448.48 USD.

The total amount at risk has been estimated at $72,110,000 USD. No funds were lost.

Immediate Reactions

"UPCX has identified unauthorized activity involving our management account. As a precautionary measure, we are taking immediate action to ensure platform security."

"UPCX deposits and withdrawals are temporarily suspended. User assets remain safe and unaffected. We are actively investigating the issue and will provide updates as soon as possible."

Ultimate Outcome

As of May 7th, it appears that deposits and withdrawals are still disabled on some exchanges, while UPCX is reportedly continuing to perform security checks.

Total Amount Recovered

There do not appear to have been any funds recovered in this case.

What funds were recovered? What funds were reimbursed for those affected users?

Ongoing Developments

UPCX continues to operate. It is unclear if deposits and withdrawals are globally enabled.

Individual Prevention Policies

No specific policies for individual prevention have yet been identified in this case.

For the full list of how to protect your funds as an individual, check our Prevention Policies for Individuals guide.

Platform Prevention Policies

Policies for platforms to take to prevent this situation have not yet been selected in this case.

For the full list of how to protect your funds as a financial service, check our Prevention Policies for Platforms guide.

Regulatory Prevention Policies

No specific regulatory policies have yet been identified in this case.

For the full list of regulatory policies that can prevent loss, check our Prevention Policies for Regulators guide.

References

  1. UPCX - "UPCX has identified unauthorized activity involving our management account. As a precautionary measure, we are taking immediate action to ensure platform security." - Twitter/X (Accessed May 15, 2025)
  2. UPCX - "The staking platform remains fully operational for both staking and claiming. However, UPCX does not encourage users to stake at this time as we conduct internal assessments." - Twitter/X (Accessed May 15, 2025)
  3. UPCX - "The information reported by various sources differs, but 18,473,290 UPC remains under the control of the project. While suspicious activity is currently under investigation, the project team will proceed with the transfer of the relevant UPC today, April 4, 2025, around 09:00 UTC±0." - Twitter/X (Accessed May 15, 2025)
  4. UPCX Homepage (Accessed May 15, 2025)
  5. 18,473,280 UPCX Transferred Back To Secure Wallet (Accessed May 15, 2025)
  6. UPCX - "The UPC has been transferred. These UPC tokens are now securely managed." - Twitter/X (Accessed May 15, 2025)
  7. UPCX - "We're currently conducting security checks on UPCX to ensure safe transactions. Deposits and withdrawals are temporarily suspended on some exchanges. We'll lift the restrictions as soon as the process is complete. Thanks for your patience!" - Twitter/X (Accessed May 15, 2025)
  8. https://etherscan.io/token/0x487d62468282bd04ddf976631c23128a425555ee?a=0x0ddc6030572aa4b73ee82d6650cac9b5cd5ffd00 (Accessed May 15, 2025)
  9. Ethereum Transaction Hash: 0xdf860be36a... (Accessed May 15, 2025)
  10. Ethereum Transaction Hash: 0xca9321892a... (Accessed May 15, 2025)
  11. https://etherscan.io/token/0x487d62468282bd04ddf976631c23128a425555ee?a=0x2d31a16d7e99c4af119ee7dc5028ec6d8f14d331 (Accessed May 15, 2025)
  12. Ethereum Transaction Hash: 0xe300dc256f... (Accessed May 15, 2025)
  13. Address 0x0ddc6030572aa4b73ee82d6650cac9b5cd5ffd00 (Accessed May 15, 2025)
  14. https://etherscan.io/token/0x487d62468282bd04ddf976631c23128a425555ee?a=0x14e46e1b893d72dc82153639aa25cbd5d510cf51 (Accessed May 15, 2025)