Ember: The address associated with the UXLINK hacker has begun closing $148 million in long positions.

An address linked to the UXLINK hacker has begun unwinding roughly $148 million in long positions on Hyperliquid using a time-weighted average price (TWAP) tool, per on-chain monitor Ember. The positions comprise about 30,282 ETH, 550,000 SOL and 35.03 million XRP, and are scheduled to be fully closed within 16 hours at an expected loss of approximately $3.3 million. The staged exit matters because the TWAP schedule spreads selling across a defined window, limiting sudden spot pressure on the three tokens while the loss signals the hacker's leveraged bets went against them. Traders will watch whether the 16-hour liquidation completes as planned and whether related addresses hold further positions on the venue.