Radix Foundation said an attacker exploited a previously unknown flaw in the Radix Engine to withdraw assets from third-party vaults without owner authorization, then moved those funds through Hyperlane to Ethereum, BNB Chain and Solana for sale. The foundation said the bug originated from a code cleanup carried out in June 2023, and that an independent security audit by Zellic in August 2024 did not detect the issue. About three hours after the incident began, Radix validators deliberately took enough stake offline to prevent the network from reaching consensus, a step that stopped further exploitation but also left the network temporarily inactive. Assets affected included ETH, WBTC, USDT, USDC, BNB and SOL. Radix said a fix has been completed, independently reviewed and tested, and that work is now focused on restoring the network.
Radix Foundation said an attacker used a previously undiscovered vulnerability in the Radix Engine to withdraw assets from third-party vaults without owner authorization, then bridged the funds through Hyperlane to networks including Ethereum, BNB Chain and Solana, where they were sold.
According to the incident report, the flaw stemmed from a code cleanup in June 2023. Radix also said an independent security audit conducted by Zellic in August 2024 did not identify the issue.
Roughly three hours after the incident started, Radix validators deliberately took enough staked share offline so the network could no longer reach consensus, blocking any further exploitation. The move left the network temporarily inactive.
Affected assets included ETH, WBTC, USDT, USDC, BNB and SOL. Radix said the vulnerability has now been fixed and has gone through independent review and testing, with network recovery currently underway.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
