Wrapped BNB

Radiant

Radiant Capital

Crypto security firm Ancilia landed itself in hot water after accidentally sharing a link pointing to a crypto wallet drainer in an attempt to aid users who lost funds in a $52 million exploit of lending protocol Radiant Capital.&nbsp;
Radiant Capital users were rushing to revoke permissions to prevent their funds from being stolen after <a data-ct-non-breakable="null" href="https://cointelegraph.com/news/radiant-capital-pauses-contracts-exploit-fears" rel="null" target="null" text="null" title="null">the lending protocol was hacked on Oct. 16</a>. The attackers made off with about $51.5 million in funds.&nbsp;
Pseudonymous crypto commentator Spreek <a data-ct-non-breakable="null" href="https://x.com/spreekaway/status/1846637474467975648" rel="null" target="null" text="null" title="null">shared</a> a screenshot of Ancilia’s now-deleted post, which re-posted what they said was a “scam link” from an imposter Radiant X account.&nbsp;
Ancilia instructed Radiant Capital users trying to revoke their permissions on the exploited protocol to “please follow the link from this official message.”
The link led to a wallet drainer that would have siphoned the funds of any user who clicked on it and accepted the permissions.&nbsp;
<figure>
 <img alt="Crypto security firm mistakenly shares drainer link to ‘help’ Radiant hack victims" src="https://s3.cointelegraph.com/uploads/2024-10/0192988f-0899-70c9-952e-583e80270812" title="">
 <figcaption style="text-align: center;">
 The now-deleted tweet from Ancilia. Source: Spreek
 </figcaption>
</figure>
“For fuck’s sake, if you are a ‘trusted’ security account, you need to absolutely make sure to never do this,” Spreek wrote in an X <a data-ct-non-breakable="null" href="https://x.com/spreekaway/status/1846637474467975648" rel="null" target="null" text="null" title="null">post</a>.
Crypto security firm De.Fi alerted users of the Radiant Capital hack in an Oct. 16 X <a data-ct-non-breakable="null" href="https://x.com/De_FiSecurity/status/1846624940440572405" rel="null" target="null" text="null" title="null">post</a> saying that the attackers had altered the <a data-ct-non-breakable="null" href="https://cointelegraph.com/explained/defi-lending-and-borrowing-explained" rel="nofollow noopener" target="_blank" text="null" title="https://cointelegraph.com/explained/defi-lending-and-borrowing-explained">protocol’s</a> smart contracts on BNB Smart Chain and Arbitrum.&nbsp;
The change in the smart contracts allowed the attackers to steal about $51.5 million in assets, including USD Coin (<a data-ct-non-breakable="null" href="https://cointelegraph.com/usdc-price-index" rel="null" target="null" text="null" title="null">USDC</a>), Wrapped BNB (WBNB) and Ether (<a data-ct-non-breakable="null" href="https://cointelegraph.com/ethereum-price" rel="null" target="null" text="null" title="null">ETH</a>).&nbsp;
The security firm said that Radiant Capital was controlled by a multi-signature wallet with 11 signers. The hackers reportedly obtained access to three of the signers’ private keys, which allowed them to alter the protocol’s smart contracts and steal user funds.&nbsp;
Related: <a data-ct-non-breakable="null" href="https://cointelegraph.com/news/scientists-breach-crypto-algorithms-quantum-computer-report" rel="null" target="null" text="null" title="https://cointelegraph.com/news/scientists-breach-crypto-algorithms-quantum-computer-report">Scientists breach cryptographic algorithms with quantum computer</a>
The attack marked the second time that Radiant has suffered an exploit this year. <a data-ct-non-breakable="null" href="https://cointelegraph.com/news/radiant-capital-begins-debt-repayment-after-4-5-million-flash-loan-exploit" rel="nofollow noopener" target="_blank" text="null" title="https://cointelegraph.com/news/radiant-capital-begins-debt-repayment-after-4-5-million-flash-loan-exploit">Radiant lost $4.5 million</a> in January after hackers exploited a different flaw in its smart contracts.&nbsp;
Radiant <a data-ct-non-breakable="null" href="https://x.com/RDNTCapital/status/1846634050100039881" rel="null" target="null" text="null" title="null">said</a> it was “aware of the issue” and was working with several security firms, including SEAL911, Hyperactive, ZeroShadow and Chainalysis, to resolve the problem.&nbsp;
In a later <a data-ct-non-breakable="null" href="https://x.com/RDNTCapital/status/1846673545973432333" rel="null" target="null" text="null" title="null">post</a> to X, Radiant directed users to revoke <a data-ct-non-breakable="null" href="https://cointelegraph.com/learn/what-are-smart-contracts-a-beginners-guide-to-automated-agreements#:~:text=Smart%20contracts%20are%20self%2Dexecuting,are%20completed%20as%20agreed%20upon." rel="nofollow noopener" target="_blank" text="null" title="https://cointelegraph.com/learn/what-are-smart-contracts-a-beginners-guide-to-automated-agreements#:~:text=Smart%20contracts%20are%20self%2Dexecuting,are%20completed%20as%20agreed%20upon.">smart contract</a> permissions using an app called revoke.cash, which helps users cut ties between their wallets and smart contracts.
<figure>
 <img alt="Crypto security firm mistakenly shares drainer link to ‘help’ Radiant hack victims" src="https://s3.cointelegraph.com/uploads/2024-10/0192988f-ea57-7093-974e-6405ae7bb439" title="">
 <figcaption style="text-align: center;">
 Source: <a data-ct-non-breakable="null" href="https://x.com/RDNTCapital/status/1846673545973432333" rel="nofollow noopener" target="_blank" text="null" title="https://x.com/RDNTCapital/status/1846673545973432333">Radiant Capital</a>
 </figcaption>
</figure>
Magazine: <a data-ct-non-breakable="null" href="https://cointelegraph.com/magazine/rabby-scammer-konpyl-crypto-ceo-mountain-victims/" rel="nofollow noopener" target="_blank" text="null" title="https://cointelegraph.com/magazine/rabby-scammer-konpyl-crypto-ceo-mountain-victims/">Fake Rabby Wallet scam linked to Dubai crypto CEO and many more victims</a>

Crypto security firm mistakenly shares drainer link to ‘help’ Radiant hack victims

Cointelegraph

Other articles published on Oct 17, 2024

DeFi remains popular amid explosion in crypto usage: a16z report

Bitcoin Rejecting From a Crucial Resistance: Here is What to Expect From the BTC Price Rally Unti...

Elizabeth Warren vs John Deaton, MoonPay x Ripple Stablecoin Launch, + Ripple Swell 2024

SEC v. Ripple: Has Regulator Missed Key Deadline?

Satoshi Predicted to Lose Bitcoin Crown by Christmas, Ripple President Speaks out on RLUSD Use Ca...

Crypto.com Takes Legal Action Against SEC Over Wells Notice

Join our free newsletter for daily crypto updates!