Radiant

DeFi

Radiant Capital

when

Radiant Capital, a decentralized finance (DeFi) platform, has revealed that the <a href="https://thecoinrise.com/radiant-capital-suffers-50m-loss-in-major-cyberattack-users-funds-drained/" rel="noopener noreferrer nofollow">$50 million exploit it suffered in October</a> was orchestrated by North Korea-linked hackers. <a href="https://medium.com/@RadiantCapital/radiant-capital-incident-update-e56d8c23829e" rel="noopener noreferrer nofollow">According</a> to a December 6 investigation update, cybersecurity firm Mandiant attributed the attack to a Democratic People’s Republic of Korea (DPRK)-aligned threat actor identified as “UNC4736,” also known as “Citrine Sleet.”
<h2 id="span-style-font-weight-400-malware-delivered-through-telegram-span">Malware Delivered Through Telegram</h2>
The breach began on September 11, when a Radiant developer received a Telegram message from an individual posing as a former contractor. The message included a ZIP file purportedly seeking feedback on a new project. Upon review, the file was determined to have contained malware. The domain associated with the file spoofed the contractor’s legitimate website, making the deception highly convincing.
Once the malware infiltrated developer devices, it allowed attackers to gain control of private keys and smart contracts. The platform halted lending operations on October 16 after malicious transactions were executed under the guise of routine activities.
<h2 id="span-style-font-weight-400-sophisticated-tactics-in-radiant-hack-span">Sophisticated Tactics in Radiant Hack</h2>
Radiant highlighted the advanced techniques employed by the hackers, who exploited the DeFi platform’s reliance on blind signing and front-end verifications. The malware further spoofed transaction data on user interfaces, rendering traditional checks and simulations ineffective.
“Even with best practices, such as hardware wallets, transaction simulations, and standard operating procedures, the attackers executed their deception seamlessly,” Radiant noted.
North Korean hacking collectives, notably the <a href="https://thecoinrise.com/alex-lab-links-4m-crypto-hack-to-north-korean-lazarus-group/" rel="noopener noreferrer nofollow">Lazarus Group, have a history of targeting crypto platforms</a>, stealing over $3 billion in assets between 2017 and 2023. In this case, the attackers transferred $52 million of stolen funds on October 24, causing a severe blow to Radiant’s operations.
This incident is not Radiant’s first setback this year. In January, the platform suffered a $4.5 million flash loan exploit. Following these events, Radiant’s total value locked (TVL) has plummeted from over $300 million at the start of the year to approximately $5.81 million, according to DefiLlama.&nbsp;&nbsp;&nbsp;
Radiant underscored the need for hardware-level solutions to counteract advanced threats. As the <a href="https://thecoinrise.com/defi-technologies-reports-strong-q3-earnings-launches-bitcoin-staking-strategy/" rel="noopener noreferrer nofollow">DeFi sector continues to grow</a>, attacks like these highlight the critical importance of bolstering cybersecurity measures to safeguard user funds and platform integrity.
The post <a href="https://thecoinrise.com/radiant-capital-50m-hack-linked-to-north-korean-hackers-details/" rel="noopener noreferrer nofollow">Radiant Capital $50M Hack Linked to North Korean Hackers: Details</a> appeared first on <a href="https://thecoinrise.com/" rel="noopener noreferrer nofollow">TheCoinrise.com</a>.

Radiant Capital $50M Hack Linked to North Korean Hackers: Details

Table of Contents

TheCoinrise Media

Other articles published on Dec 9, 2024

Elon Musk: IRS relies on old computers, ‘can’t pass basic audits’

Bitcoin and Cryptocurrencies are Declining – Here are the Estimates of the Decline and the Latest...

Bitcoin's Next Move: Assessing Key Levels for Potential Correction

Nvidia shares tumble as China launches antitrust investigations

MOG Token Surges Following Coinbase Listing News

Experts highlight XRP, Cardano, PEPE, and XYZVerse as top bets

Join our free newsletter for daily crypto updates!