Ethereum

Radiant

DeFi

Radiant Capital

Radiant Capital was hacked on Wednesday, resulting in losses exceeding $50 million.
Several blockchain security firms have reported that the exploit occurred due to an apparent cyberattack targeting the platform’s smart contracts on both the Binance and Arbitrum networks.
<h2 id="compromised-multisig">Compromised Multisig</h2>
The incident was first <a href="https://x.com/AnciliaInc/status/1846605867753591002" target="_blank" rel="noopener noreferrer nofollow" data-wpel-link="external">detected</a> by blockchain security firm Ancilia Inc., which reported suspicious activity on a Radiant Capital smart contract on the BNB Chain at 1:35 PM ET in an X post.
According to Ancilia, several on-chain transactions <a href="https://x.com/AnciliaInc/status/1846609922047594557" target="_blank" rel="noopener noreferrer nofollow" data-wpel-link="external">showed</a> that hackers drained at least $18 million from Radiant on the BNB network. The attack soon spread to its liquidity pools on the Ethereum layer-2 network Arbitrum, where more assets were compromised.
Web3 security firm De.Fi <a href="https://x.com/De_FiSecurity/status/1846629116289659386" target="_blank" rel="noopener noreferrer nofollow" data-wpel-link="external">explained</a> that the bad actors gained control by compromising a multisig, which requires the approval of multiple signers to execute transactions. The attacker was able to obtain the private keys of 3 out of the 11 signers that secure Radiant’s wallet. This gave them enough access to upgrade the platform’s smart contracts and transfer ownership.
Hacken <a href="https://x.com/hackenclub/status/1846621673975361830" target="_blank" rel="noopener noreferrer nofollow" data-wpel-link="external">reported</a> that the funds were drained from various trading pools on Radiant, including those holding popular cryptocurrencies such as USDC, USDT, wrapped Bitcoin (wBTC), wrapped Ethereum (wETH), Binance Coin (wBNB), and others.
Spot On Chain <a href="https://x.com/spotonchain/status/1846720479023059004" target="_blank" rel="noopener noreferrer nofollow" data-wpel-link="external">disclosed</a> that the protocol was exploited for $53 million in crypto assets. The hacker has since converted the stolen funds into native tokens, holding 12,835 ETH (valued at $33.56 million) and 32,113 BNB (worth $19.35 million) across two wallet addresses.
<h2 id="radiant-capital-s-response">Radiant Capital’s Response</h2>
The DeFi platform <a href="https://x.com/RDNTCapital/status/1846634050100039881" target="_blank" rel="noopener noreferrer nofollow" data-wpel-link="external">confirmed</a> the incident in an X post, stating that it was aware of suspicious activity affecting its lending markets on the Binance Chain and Arbitrum.&nbsp;It responded by suspending its markets on Ethereum and the layer-2 network Base “until further notice” while it investigates the breach.
<blockquote>
 “We are aware of an issue with the Radiant Lending markets on Binance Chain and Arbitrum.”
</blockquote>
The announcement also mentioned that Radiant is working with several Web3 security partners, including SEAL911, Hypernative, ZeroShadow, and Chainalysis, to resolve the situation and prevent further damage. Additionally, it has <a href="https://x.com/RDNTCapital/status/1846673545973432333" target="_blank" rel="noopener noreferrer nofollow" data-wpel-link="external">urged</a> users to revoke all permissions to the smart contracts powering its protocol.
Meanwhile, this marks the second exploit the protocol has faced this year. In January 2024, the lending platform <a href="https://cryptopotato.com/radiant-capital-flash-loan-attack-leads-to-4-5-million-loss/" target="_blank" rel="noopener noreferrer nofollow" data-wpel-link="internal">lost</a> $4.5 million in an unrelated hack caused by a vulnerability in its smart contracts.
The post <a href="https://cryptopotato.com/defi-lending-platform-radiant-capital-suffers-50m-exploit/" rel="noopener noreferrer nofollow">DeFi Lending Platform Radiant Capital Suffers $50M Exploit</a> appeared first on <a href="https://cryptopotato.com/" rel="noopener noreferrer nofollow">CryptoPotato</a>.

DeFi Lending Platform Radiant Capital Suffers $50M Exploit

Table of Contents

CryptoPotato_News

Other articles published on Oct 17, 2024

Experts Analyze Bitcoin’s Potential in Current Market Conditions

GOAT Coin Captivates Cryptocurrency Enthusiasts

Kraken Wrapped Bitcoin Token Launched to Promote DeFi Adoption

Crypto Price Today (Oct 17, 2024): Bitcoin Whale Activity Soars, Fear & Greed Index Alerts Greed

Radiant Capital Loses $50M in its Second Attack This Year

Italy to Increase Bitcoin Capital Gains Tax to 42% Amid Crypto Growth

Join our free newsletter for daily crypto updates!