“Radiant Capital’s Multi-Signature Exploit: Loss of $50 Million and Lessons Learned”

The DeFi platform advised users to revoke approvals across all chains, including Arbitrum, BSC, and Base.

The platform has also introduced a mandatory 72-hour delay for all contract upgrades and ownership transfers to give the community enough time to check transactions before final execution.

Source

Radiant Capital has released a detailed analysis of the October 16 exploit that led to the loss of more than $50 million in user funds. Radiant Capital is working closely with U.S. According to the post-mortem, the attacker used highly advanced malware to poison transactions, enabling them to steal funds during a routine multi-signature process.

The attacker hacked the hard wallets belonging to three of the protocol’s core developers and injected them with malware that mimicked legitimate transactions. law enforcement, including the FBI, as well as cybersecurity firms SEAL911 and ZeroShadow to track the stolen crypto. Radiant Capital has reiterated that its contributors followed standard operating procedures to the letter in the fateful process. Despite these multiple layers of verification, the attacker took advantage of common transaction failures to execute the hack.

The actual amount stolen varies between $50 million and $58 million, depending on the source reporting it.

Related Posts

Leave a Reply

Your email address will not be published. Required fields are marked *

Share via
Copy link