Share this article
Radiant Capital Loses $50M to Second Blockchain Exploit This Year
Attackers appear to have obtained three out of 11 private keys needed to upgrade the protocol.
Updated Oct 16, 2024, 8:46 p.m. Published Oct 16, 2024, 8:34 p.m.
Make us preferred on Google
Blockchain lending protocol Radiant Capital lost more than $50 million on Wednesday as the result of an apparent cyberattack, according to security experts and blockchain data.
An attacker gained control of Radiant Capital's blockchain contracts by obtaining three of the "private keys" that control the protocol, security experts said.
STORY CONTINUES BELOW
"Radiant Capital contracts were exploited on BSC & ARB chains with the 'transferFrom' function," Web3 security firm De.Fi explained on X. The exploit allowed attackers to "drain users' funds, namely $USDC $WBNB $ETH and others," the firm said.
Radiant is controlled by a multi-signature, or "multisig" wallet with 11 signers, De.Fi said in a separate X post. The attacker was apparently able to obtain three of these signers' "private keys," which was enough to upgrade the platform's smart contracts.
The Radiant platform encompasses a suite of tools allowing users to borrow, lend, and bridge cryptocurrencies across blockchains.
It's the second time this year that the protocol has been targeted in an exploit: In January, Radiant lost $4.5 million in an unrelated hack stemming from a bug in its smart contracts.
It was unclear at press time how the private keys were sabotaged in Wednesday's attack. Some members of an Ethereum security group on Telegram, the messaging app, speculated that the attack could've stemmed from a compromised front-end – meaning the legitimate Radiant key-holders may have accidentally interacted with a malware-laced protocol.
Radiant acknowledged the exploit in a post to its official X account, but it did not provide specific details.
"We are aware of an issue with the Radiant Lending markets on Binance Chain and Arbitrum," Radiant said. "We are working with SEAL911, Hypernative, ZeroShadow & Chainalysis and will provide an update as soon as possible. Markets on Base and Mainnet are paused until further notice."
Radiant, which is controlled by a decentralized autonomous community, or DAO, states on its website that its mission is to "unify the billions in fragmented liquidity across Web3 money markets under one safe, user-friendly, capital-efficient omnichain."
This is a developing story. Radiant Capital did not immediately respond to a request for comment.
UPDATE (20:45 UTC, 10/16/24): Adds background information regarding Radiant and another hack in January, 2024.
More For You
Pudgy Penguins is building a multi-vertical consumer IP platform — combining phygital products, games, NFTs and PENGU to monetize culture at scale.
What to know:
Pudgy Penguins is emerging as one of the strongest NFT-native brands of this cycle, shifting from speculative “digital luxury goods” into a multi-vertical consumer IP platform. Its strategy is to acquire users through mainstream channels first; toys, retail partnerships and viral media, then onboard them into Web3 through games, NFTs and the PENGU token.
The ecosystem now spans phygital products (> $13M retail sales and >1M units sold), games and experiences (Pudgy Party surpassed 500k downloads in two weeks), and a widely distributed token (airdropped to 6M+ wallets). While the market is currently pricing Pudgy at a premium relative to traditional IP peers, sustained success depends on execution across retail expansion, gaming adoption and deeper token utility.
More For You
Deus X CEO Tim Grant: We aren't replacing finance; we're integrating it
The Deus X CEO discussed his journey into digital assets, the company's infrastructure-led growth strategy, and why his Consensus Hong Kong panel promises "real talk only."
What to know:
- Tim Grant entered crypto in 2015 after early exposure to Ripple and Coinbase, drawn by blockchain’s ability to improve traditional finance rather than replace it.
- Deus X combines investing and operating to build regulated digital finance infrastructure across payments, prime services, and institutional DeFi.
- Grant will be speaking at Consensus Hong Kong in February.
Top Stories
