Addresses suspected of being linked to the UXLINK hack hold approximately $44 million in ETH long positions.

on November 9, according to The Defiant, PeckShield identified a Hyperliquid account holding an ETH long position that may be linked via an intermediary wallet to the UXLINK theft. Subsequent dashboard snapshots show the position amounts to approximately 20,919 ETH, valued at roughly $44 million, carrying an unrealized loss of about $652,000.

The account’s average entry price was $2,134.45, employing 15x cross leverage, with an estimated liquidation price of $1,630.63 in the snapshot. The report notes that the linkage is based on an intermediary address transferring 11 million USDC to the trading account, which had previously interacted with an address flagged as a UXLINK attacker; however, this indirect connection alone does not prove the trader controls the attacker’s wallet.

TechFlow previously reported that the relevant addresses have begun closing their ETH, SOL, and XRP long positions in batches, with the original combined position value totaling approximately $148 million.