Radiant

Arbitrum

Radiant Capital

Million

USDC

<p>In a recent high-profile security incident, Radiant Capital, a prominent cross-chain lending protocol, has temporarily suspended its lending and borrowing markets on the Arbitrum network. This move comes in the wake of a sophisticated $4.5 million exploit (equivalent to 2337 ETH) targeting its newly launched USDC Coin (USDC) markets.</p>
<h2 id="h-details-of-the-attack" class="wp-block-heading">Details of the Attack</h2>
<p>The exploit, confirmed by Radiant developers in collaboration with the cybersecurity community, was identified as a flash loan attack. It originated from a rounding issue within the protocol’s codebase.&nbsp;<a href="https://twitter.com/BeosinAlert/status/1742389285926678784" rel="noopener noreferrer nofollow">Beosin</a>, a blockchain security firm, detailed that a cumulative precision error arose due to this rounding glitch.</p>
<blockquote class="twitter-tweet" data-width="550" data-dnt="true">
 <p lang="en" dir="ltr">Today, we received a report of an issue with the newly created native USDC market on Arbitrum. After validation by Radiant developers and the wider Web 3 security community, the Radiant DAO Council paused lending/borrowing markets on Arbitrum temporarily while this is…</p>
 <p>— Radiant Capital (@RDNTCapital) <a href="https://twitter.com/RDNTCapital/status/1742338729925112272?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">January 3, 2024</a></p>
</blockquote>
<p>The attacker manipulated an index parameter, causing a significant inflation in its value, which led to a cumulative precision error during the deposit() and withdraw() operations. This error allowed the attacker to profit substantially within a very short period.</p>
<h2 id="h-peckshield-s-analysis" class="wp-block-heading">PeckShield’s Analysis</h2>
<p>Another analytics firm, PeckShield, linked the exploit’s mechanism to a vulnerability in the existing Compound/Aave codebase. It was triggered when a new market was added to the lending platform. The firm pinpointed that the USDC market was exploited just six seconds after its activation, calling for more stringent measures during the activation of new markets.</p>
<blockquote class="twitter-tweet" data-width="550" data-dnt="true">
 <p lang="en" dir="ltr">Today's hack on <a href="https://twitter.com/RDNTCapital?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">@RDNTCapital</a> results in the loss of 1.9k eth (~$4.5m).</p>
 <p>The root cause is not new: It basically exploits a time window when a new market is activated in a lending market (forked from the popular Compound/Aave). The exploitation also relies on a known rounding… <a href="https://t.co/XogWUVO3po" rel="noopener noreferrer nofollow">https://t.co/XogWUVO3po</a> <a href="https://t.co/x5X9ql8AGA" rel="noopener noreferrer nofollow">pic.twitter.com/x5X9ql8AGA</a></p>
 <p>— PeckShield Inc. (@peckshield) <a href="https://twitter.com/peckshield/status/1742334242120466580?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">January 2, 2024</a></p>
</blockquote>
<h2 id="h-radiant-capital-s-response" class="wp-block-heading">Radiant Capital’s Response</h2>
<p>In reaction to this security breach, Radiant Capital has halted its Arbitrum operations. They have reassured users that no additional funds are at risk and have committed to a thorough investigation. The platform, known for allowing users to trade assets across various blockchains, stated that operations would resume post-investigation.</p>
<h2 id="h-conclusion" class="wp-block-heading">Conclusion</h2>
<p>This incident underscores the vulnerabilities inherent in decentralized finance (DeFi) platforms and the importance of robust security protocols. As the crypto ecosystem continues to expand, such events serve as stark reminders of the challenges DeFi protocols face in safeguarding against hacker attacks. Radiant Capital’s response and subsequent actions will be closely monitored by the crypto community as it seeks to recover from this significant setback.</p>
<p>The post <a href="https://thecoinrise.com/radiant-capital-halts-arbitrum-operations-post-4-5-million-exploit/" rel="noopener noreferrer nofollow">Radiant Capital Halts Arbitrum Operations Post $4.5 Million Exploit</a> appeared first on <a href="https://thecoinrise.com" rel="noopener noreferrer nofollow">Latest News and Insights on Blockchain, Cryptocurrency, and Investing</a>.</p>

Radiant Capital Halts Arbitrum Operations Post $4.5 Million Exploit

Table of Contents

TheCoinrise Media

Other articles published on Jan 3, 2024

Challenges of Fiat Currency Depreciation and the Rise of Bitcoin Investments

Radiant Capital Loses $4.5 Million Worth of Ethereum to Hackers

Bitmain Inks $5.32 Million Deal with BTC Digital for Mining Machines

Netflix’s Bitconned Exposes Crypto’s Dark Side, Unveils Centra Tech’s Scheme

How crypto market mirrors early stock market trends

OKX Expands NFT Marketplace with Aptos Inscriptions and BlueMove Integration

Join our free newsletter for daily crypto updates!