Major

Wrapped BNB

Radiant

Radiant Capital

when

Radiant Capital, a leading blockchain lending platform, has fallen victim to a devastating cyberattack, resulting in losses exceeding $50 million. The attack, which took place on Wednesday, saw an unknown hacker gain unauthorized control over the platform’s blockchain contracts by compromising key components of its security structure, according to Web3 security experts. 
The attack marks the second time <a href="https://thecoinrise.com/radiant-capital-faces-major-setback-as-1900-eth-gets-hacked/">Radiant has been targeted in 2024</a>.&nbsp; 
The breach occurred when the attacker successfully obtained three private keys controlling Radiant’s blockchain contracts on both the Binance Smart Chain (BSC) and Arbitrum networks. <a href="https://x.com/De_FiSecurity/status/1846624940440572405">According</a> to Web3 security firm De.Fi, the hacker exploited the “transferFrom” function within the contracts, allowing them to siphon off significant amounts of digital assets, including USDC, Wrapped BNB (WBNB), and Ethereum (ETH). 
<h2 id="span-style-font-weight-400-exploiting-multisig-wallet-vulnerabilities-span">Exploiting Multisig Wallet Vulnerabilities</h2> 
Radiant Capital operates under a multi-signature wallet, which requires approval from several signers to authorize any significant contract changes. In this case, the platform’s multisig wallet has 11 signers, and the attacker managed to acquire the private keys of three of them. This provided enough leverage to modify the platform’s smart contracts and initiate the large-scale theft. 
The hack highlights vulnerabilities in decentralized finance (DeFi) protocols, where control over private keys can have catastrophic consequences. While the exact method by which the keys were compromised remains unclear, some members of an Ethereum security group speculated that the breach may have stemmed from a compromised front-end. This would suggest that legitimate Radiant key holders might have unknowingly interacted with a malware-infected version of the protocol. 
<h2 id="span-style-font-weight-400-radiant-pauses-operations-span">Radiant Pauses Operations</h2> 
In response to the incident, Radiant Capital <a href="https://x.com/RDNTCapital/status/1846634050100039881">posted</a> an acknowledgment on its official X account, stating that it is actively investigating the matter. The company has paused operations on its lending markets across the Binance Chain and Arbitrum, with its Base and Mainnet markets also frozen as a precautionary measure. Radiant has partnered with cybersecurity firms SEAL911, Hypernative, ZeroShadow, and Chainalysis to assist in their investigation. 
Amid this chaos, crypto security firm Ancilia mistakenly <a href="https://x.com/spreekaway/status/1846637474467975648">shared</a> a link to a wallet drainer while trying to help Radiant attack victims. Users were rushing to revoke permissions after the hack when Ancilia, in a now-deleted post, shared a scam link from a fake Radiant X account. The link, if followed, would have drained users’ funds. 
Notably, earlier in January, <a href="https://thecoinrise.com/radiant-capital-halts-arbitrum-operations-post-4-5-million-exploit/">Radiant suffered a $4.5 million loss</a> due to a smart contract bug. 
The post <a href="https://thecoinrise.com/radiant-capital-suffers-50m-loss-in-major-cyberattack-users-funds-drained/">Radiant Capital Suffers $50M Loss in Major Cyberattack, Users’ Funds Drained</a> appeared first on <a href="https://thecoinrise.com/">TheCoinrise.com</a>.

Radiant Capital Suffers $50M Loss in Major Cyberattack, Users’ Funds Drained

Table of Contents

TheCoinrise Media

Other articles published on Oct 17, 2024

Spot Bitcoin ETFs see four straight days of inflows, surpassing $1.6b, Ether ETFs rebound

Ethereum V. Solana: An In-Depth Comparison

Robinhood to Launch Bitcoin and Ether Futures Trading

DeFi remains popular amid explosion in crypto usage: a16z report

Swarm Markets to Offer Gold Bar Investment Opportunities on Bitcoin Network via Ordinals Protocol

Bitcoin Holds Steady as DOGE Surges

Join our free newsletter for daily crypto updates!