Radix Foundation Reports Asset Theft via Engine Vulnerability

Radix Foundation confirmed that an attacker exploited a previously unknown vulnerability in the Radix Engine to withdraw assets from third-party vaults. The stolen funds were bridged via Hyperlane to Ethereum, BNB Chain, and Solana to be sold. The flaw originated from a code refactor in June 2023 and remained undetected during a security audit by Zellic in August 2024. To halt the exploit, validators took the network offline by reducing staked shares. Affected assets include ETH, WBTC, USDT, USDC, BNB, and SOL. The vulnerability has since been patched and verified, with network recovery efforts currently underway.