Cryptocurrency
[loss] $50M+
"Radiant Capital Loses $50M to Second Blockchain Exploit This Year"
Primary Source ↗Financial Loss
$50.0M
(50,000,000 USD)
Blockchain(s)
Ethereum
Incident Details
The cryptocurrency lending project Radiant Capital was hacked for the second time in under a year, this time for more than $50 million in the USDC stablecoin, wBNB, ETH, and other tokens. An attacker successfully gained access to three of eleven private keys controlling a multisignature wallet, which enabled them to upgrade the project’s smart contracts in such a way as to drain funds.This is the second Radiant Capital exploit this year, after a $4.5 million theft in January that was enabled by an unaddressed vulnerability in the underlying Compound Finance code.The US and South Korean governments later attributed this attack on Radiant to North Korean state-sponsored attackers.
Total loss estimated at $50,000,000.
Technical Details
- Initial Attack Vector
- Nation-state attack (Lazarus/DPRK) — private key or social engineering compromise
- Vendor / Product
- Radiant Capital
Timeline
- 2024-10-16 Breach occurred
- 2024-10-16 Publicly disclosed