Hackers tried to launder money but ended up making money? New clues have emerged regarding the approximately $40 million theft from UXLINK last year. Echoes have traced an account with financial ties to the UXLINK hackers, holding approximately 30,000 ETH long positions on Hyperliquid. Could it be that the hackers intended to transfer funds through contract trading, but their predictions were correct, resulting in even more money in the account? Following the account data, a large-scale, continuously risky transaction is indeed visible. On August 7th, the account received a test transfer of 10 USDC. About six minutes later, it received approximately 11.5456 million USDC. As of approximately 9:00 AM on October 28th, the account equity was approximately $17.9 million, with a cumulative net profit of approximately $6.35 million, a return of approximately 55%. In other words, the money entering this account did increase after trading, but the process was far from the easy scenario of "the hacker making millions again." On October 5th, the account equity reached approximately 300... The account started with $0,000, corresponding to a cumulative profit of approximately $18.45 million. Subsequently, the account equity dropped by approximately $12.1 million, and the returned funds showed no corresponding external withdrawal records. Having earned $18.45 million, it now has approximately $6.35 million remaining, meaning about two-thirds of the profits have been given back. Currently, it still holds approximately 30,282 ETH long positions, with an average entry price of approximately $2,134, and a notional position value of approximately $70.96 million. For every $100 change in ETH, the profit/loss changes by approximately $3.03 million, nearly half of the current cumulative net profit. Maintaining the position is also costing money. Historical funding fee records show that this account has paid approximately $1.42 million in cumulative fees; based on the rates and prices at the time of the query, the current position's daily funding fees are approximately $21,300. More interestingly, it also has a $4,000 limit sell order for ETH, the same quantity as the existing long position, set to only reduce the position, and the order record date is as early as September 4th. Judging from the publicly available positions, this is an account that consistently maintains exposure to ETH price increases, is willing to pay funding fees, and is prepared to withstand significant profit drawdowns. It's very likely that the hacker originally intended to hedge this portion of funds with contracts, but unexpectedly made even more money. However, this USDT transfer method is rather crude. ETH Hyperliquid UXLINK