On October 16, the Radiant Capital platform fell victim to a cyberattack, resulting in the theft of approximately $50 million. The attack exploited a vulnerability on Arbitrum, including taking control of Radiant Capital's multisig wallet through malware that affected developers' Ethereum hardware wallets.
Tracking and Moving the Funds
PeckShield reported on October 24 that nearly all of the stolen assets were transferred from Arbitrum and Binance BNB Chain to Ethereum. Hackers moved around 20,500 ETH, using decentralized exchanges and mixers for obfuscation.
Countermeasures and Warnings
Radiant Capital suspended its lending markets and urged users to revoke permissions for vulnerable contracts. On October 23, the platform recommended using revoke.cash to protect assets and reported cooperation with law enforcement and experts to track and potentially freeze the stolen funds.