Recently, the DeFi project CrediX fell victim to a hacker attack resulting in a loss of $4.5 million. This article explores the details of the incident and the security measures taken.
Details of the Attack
CrediX has confirmed the possibility of a security breach related to a private key compromise, allowing the attacker to gain unauthorized access to the system. Currently, the assets stolen from the CrediX pool have been moved from the Sonic network to Ethereum. According to company representatives, the address that borrowed funds obtained financing via Tornado Cash.
CrediX's Security Measures
As a precautionary measure, the CrediX website has been taken offline to block new deposits. The project team assures users that all stolen funds will be recovered within 24-48 hours after the incident.
Recommendations from Hacken
According to a report by Hacken, the cryptocurrency industry suffered $3.1 billion in losses in the first half of 2025, with a significant portion attributed to multisig wallet issues. Hacken urges projects to enhance security systems by implementing AI-driven solutions to monitor multisig wallet activity and respond more quickly to suspicious behavior.
The attack on CrediX highlights the importance of access management in DeFi projects and the need for heightened security levels in the cryptocurrency industry.