Radiant

Arbitrum

Radiant Capital

USDC

Coin

<p>Radiant Capital, a prominent cross-chain lending protocol, has temporarily suspended its lending and borrowing markets on the Arbitrum blockchain due to a substantial security breach.&nbsp;</p>
<p><a href="https://twitter.com/RDNTCapital/status/1742338729925112272" rel="noopener noreferrer nofollow" target="_blank">Reports</a> indicate that a flash loan attack resulted in the unauthorized withdrawal of approximately $4.5 million in Ether from one of its newly established USDC Coin (USDC) markets. Radiant Capital developers and the wider cybersecurity community confirmed the incident.</p>
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">Today, we received a report of an issue with the newly created native USDC market on Arbitrum. After validation by Radiant developers and the wider Web 3 security community, the Radiant DAO Council paused lending/borrowing markets on Arbitrum temporarily while this is…</p>— Radiant Capital (@RDNTCapital) <a href="https://twitter.com/RDNTCapital/status/1742338729925112272?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow" target="_blank">January 3, 2024</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
 </div>
</figure>
<h2 class="wp-block-heading" id="flash-loan-attack-exploits-rounding-issue">Flash loan attack exploits rounding issue</h2>
<p>The security breach was orchestrated through a flash loan attack, with the attacker exploiting a critical “rounding issue” within the protocol’s codebase. This flaw led to a cumulative precision error, enabling the attacker to profit through repeated deposit() and withdraw() operations within the system.&nbsp;</p>
<p>Beosin, a blockchain security firm, provided insights into the nature of the exploit, characterizing it as a known issue originating from the current Compound/Aave codebase.</p>
<p>PeckShield, in an earlier report on January 2, identified the root cause of the attack as a “known rounding issue” within the Compound/Aave codebase. This vulnerability was previously associated with activating new markets in lending protocols.&nbsp;</p>
<p>In this case, the attacker exploited a specific time window during the activation of a newly created native USDC market on <a href="https://www.cryptopolitan.com/arbitrum-partial-outage-transaction-surge/" rel="noopener noreferrer nofollow">Arbitrum</a>, which was based on the popular Compound/Aave protocols.</p>
<p>The exploit resulted in the illicit withdrawal of a staggering $4.5 million worth of Ether from Radiant Capital’s protocol. Data from the Arbitrum block explorer Arbiscanner confirmed the extent of the breach. Following the discovery of the attack, Radiant Capital took immediate action to pause its lending and borrowing markets on Arbitrum.</p>
<h2 class="wp-block-heading" id="investor-reassurance-and-investigation">Investor reassurance and investigation</h2>
<p>Radiant Capital has moved swiftly to address the situation and assure its users. The protocol emphasized that no additional funds were currently at risk and pledged to conduct a comprehensive postmortem analysis of the security breach. Normal operations will be reinstated once the investigation is completed and necessary security measures are in place.</p>
<p>In the wake of the security incident, fraudulent Radiant Capital accounts have emerged across various crypto forums, particularly on Crypto X, attempting to deceive users with phishing links purporting to help revoke approvals. This has raised concerns within the crypto community about the potential for further security threats and scams targeting Radiant Capital’s users.</p>
<h2 class="wp-block-heading" id="radiant-capital-a-decentralized-lending-protocol">Radiant Capital: A decentralized lending protocol</h2>
<p>Radiant Capital is a decentralized borrowing and lending protocol that offers cross-chain functionality, utilizing LayerZero technology. The platform currently boasts a total value locked (TVL) of approximately $315 million, as reported by DefiLlama.&nbsp;</p>
<p>The security breach on the Arbitrum blockchain has prompted Radiant Capital to take proactive measures to safeguard its users’ assets and restore confidence in its platform.</p>

Exploit halts cross-chain lending on Radiant Capital’s Arbitrum platform

Table of Contents

Cryptopolitan_News

Other articles published on Jan 3, 2024

🕒 LAST CHANCE - Get your SelfKey iD and Claim 100 SELF Tokens!

Radiant Capital Loses $4.5 Million Worth of Ethereum to Hackers

Solana Faces Significant Selling Pressure as Market Turns Bearish

Bonk (BONK) to Zero? NuggetRush (NUGX) Becomes the New Meme Favorite

Spot Bitcoin ETF Applications To Be Rejected This Month, Slashing 20% Off The Bitcoin Price, Matr...

Shiba Inu (SHIB) Faces Turbulence as Market Bloodbath Unfolds

Join our free newsletter for daily crypto updates!