Radix Network Halts Temporarily After Exploit; Engine Flaw Used to Drain Third-Party Vaults

Odaily Planet Daily reported that the Radix Foundation has published an incident report detailing an exploit tied to a previously unknown vulnerability in the Radix Engine. The attackers were able to withdraw assets from third-party vaults without owner authorization, then bridged the funds via Hyperlane to multiple networks—including Ethereum, BNB Chain and Solana—where they were sold. Radix said the flaw was introduced during a code cleanup in June 2023 and was not identified in an independent security audit performed by Zellic in August 2024. About three hours after the incident, Radix validators moved to stop further abuse by proactively taking enough staked shares offline to prevent the network from reaching consensus, effectively pausing the network. Assets impacted included ETH, WBTC, USDT, USDC, BNB and SOL. Radix said the vulnerability has been patched, independently reviewed and tested, and work is ongoing to restore network operations.