On August 5 (UTC+8), the security company CertiK confirmed an attack on the DeFi protocol CrediX. The attack resulted in the theft of approximately 4.5 million dollars, which were transferred from the Sonic network to Ethereum.

According to PeckShield, the attackers gained access to administrator permissions. This allowed them to mint uncollateralized stablecoins and then use them to drain the assets of users who were staking.

SlowMist complemented the information, revealing that the attackers obtained these special permissions six days before the attack, and that the protocol's funds had already been completely drained.

CrediX acknowledged the security breach, took its website offline, and promised to recover the entirety of the stolen funds within two days.

#credix