DeFi Protocol CrediX Taken Offline After $4.5M Exploit
CrediX Finance, a recently launched Sonic-based decentralized finance (DeFi) protocol, suffered a significant security breach, resulting in a $4.5 million exploit. The incident, which occurred on Monday at 9:10 UTC, forced the protocol to shut down its website to prevent further deposits. The less-than-a-month-old platform acknowledged the breach, highlighting the urgency of the situation.
Blockchain security firm CertiK swiftly investigated and confirmed that the stolen funds had been transferred from the Sonic network to Ethereum, currently residing in three distinct wallets. While the precise method of attack remains undisclosed, the incident underscores a concerning trend. Multi-sig wallet breaches emerged as the dominant attack vector in the first half of 2025, contributing to a staggering $3.1 billion in losses due to hacks during that period. This statistic highlights the vulnerability of multi-signature wallets and the sophisticated techniques employed by attackers.
The swiftness of the funds’ movement to Ethereum suggests a well-planned and executed attack, possibly leveraging vulnerabilities in the protocol’s smart contracts or exploiting weaknesses in the multi-signature wallet system. The fact that the funds are now spread across three separate wallets complicates the recovery process, requiring a coordinated effort to trace and potentially freeze the assets.
In response to the incident, CrediX Finance assured its users via X (formerly Twitter) that all stolen funds would be recovered within 24-48 hours. This statement aims to reassure investors and maintain confidence in the platform’s ability to address the situation effectively. However, the lack of transparency regarding the specific vulnerabilities exploited raises concerns about the protocol’s long-term security and its capacity to prevent future attacks. The incident serves as a cautionary tale for other DeFi protocols, emphasizing the critical need for robust security audits and the implementation of comprehensive security measures to protect against increasingly sophisticated attacks. The recovery timeline, while ambitious, will be a crucial indicator of CrediX Finance’s ability to effectively respond to such a serious security incident and regain user trust. Further updates on the investigation and the recovery efforts are eagerly awaited.
