Radix Network Exploited for Unauthorized Transactions, $1.26 Million Stolen

Assets worth approximately $1.26 million (about 175 billion won) were stolen through 26 unauthorized transactions after a permission vulnerability in the Radix network was exploited. The stolen assets moved via the Hyperlane bridge to Ethereum, BNB Chain, and Solana. Radix Foundation disclosed in an incident report published on September 17 that attackers used a flaw in the Radix engine on August 31 to withdraw assets from other users' vaults.

CryptoSlate reported that the Radix Foundation's announcement and ledger reconstitution indicated stolen assets included USDC, USDT, ETH, wrapped Bitcoin, SOL, and BNB. The Radix Foundation stated the vulnerability was introduced during a code cleanup in June 2023 and was not detected during an external security audit in 2024. To prevent further transactions, the foundation and validators blocked the Hyperlane route and halted network operations while reviewing fixes for the vulnerability and node software before proceeding with recovery procedures.