Radiant Capital Suffers Over $50M Heist in Latest Blockchain Attack

Radiant Capital, a Binance-backed blockchain protocol specializing in cross-chain lending, was hacked on Wednesday, with attackers stealing over $50m.

According to Web3 security firm De. Fi Antivirus, the attacker(s) gained control of three out of eleven private keys needed for protocol upgrades, enabling them to alter smart contracts on both the Arbitrum and Binance Smart Chain (BSC) networks.

The hackers stole various cryptocurrencies, including USDC , ETH and BNB . They used an exploit identified as ‘transferFrom,’ allowing them to transfer tokens directly from user accounts into their own.

Radiant Suspends Lending on BNB Chain, Arbitrum After $50M Cyberattack

Lookonchain reported that the hacker converted the stolen assets into 12,835 ETH, valued at $33.6m, and 32,113 BNB, worth $19.4m.

After discovering the breach, Radiant Capital halted its lending operations on BNB Chain and Arbitrum to prevent further unauthorized transfers.

The team said that it is working with SEAL911, Hypernative, ZeroShadowand Chainalysis to address the issue, assuring that updates will follow soon. In the meantime, markets on Base and Mainnet are paused until further notice.

Radiant Suffers Second Hack This Year

This marks Radiant’s second security breach this year. In January, the protocol lost $4.5m in a separate exploit caused by a smart contract flaw.

According to De.Fi Antivirus, this recent attack differs from the first, which involved a flash loan exploit. This time, the hacker gained access to three signers, allowing them to transfer ownership and perform contract upgrades.

In Sept. 2024, attackers stole over $120m through targeted hacks on multiple crypto platforms. PeckShield data revealed more than 20 incidents, impacting both centralized and decentralized systems. The largest losses came from BingX, Penpie, and Indodax, with combined damages surpassing $90m.