Cryptocurrency [loss] $50M+

"Radiant Capital Loses $50M to Second Blockchain Exploit This Year"

2024-10-16 [vendor] Radiant Capital [chain] ethereum
Primary Source ↗
Financial Loss $50.0M (50,000,000 USD)
Blockchain(s) Ethereum

Incident Details

The cryptocurrency lending project Radiant Capital was hacked for the second time in under a year, this time for more than $50 million in the USDC stablecoin, wBNB, ETH, and other tokens. An attacker successfully gained access to three of eleven private keys controlling a multisignature wallet, which enabled them to upgrade the project’s smart contracts in such a way as to drain funds.This is the second Radiant Capital exploit this year, after a $4.5 million theft in January that was enabled by an unaddressed vulnerability in the underlying Compound Finance code.The US and South Korean governments later attributed this attack on Radiant to North Korean state-sponsored attackers.

Total loss estimated at $50,000,000.

Technical Details

Initial Attack Vector
Nation-state attack (Lazarus/DPRK) — private key or social engineering compromise
Vendor / Product
Radiant Capital

Timeline

  1. 2024-10-16 Breach occurred
  2. 2024-10-16 Publicly disclosed