- Admin breach at CrediX_fi leads to $4.5 million exploit.
- Unbacked acUSDC tokens minted, draining protocol liquidity instantly.
- CrediX disables website, urges smart contract-only withdrawals for safety.
Decentralized exchange CrediX_fi has fallen victim to a significant security breach, resulting in the loss of approximately $4.5 million. According to a report by PeckShield, the attack was executed through a compromised administrative wallet ending in 662e, which had broad permissions across the platform.
The service attack compromised roles POOL_ADMIN, BRIDGE, RISK_ADMIN, EMERGENCY_ADMIN, and ASSET_LISTING_ADMIN. Access to these core privileges allowed the intruder to mint unbacked acUSDC tokens against the Sonic USDC market. These artificial tokens, without any collateral, were later used to withdraw funds from the different liquidity pools.
Of course, the attacker used the BRIDGE role to sidestep the collateral requirements and drain pool assets by minting value into fiction. This manipulation resulted in a series of damaged contracts, and an emergency caused the protocol’s operators to take action on their site and recommend that users deal with their contracts of the protocol’s smart contracts.
Additionally, the platform’s failure to allow isolating or deactivating particular admin roles in emergencies contributed to a significant failure of the architecture. The breach of contingency controls made the situation worse. Consequently, investors and developers are uncertain about the protocol’s safety and future functionality.
Also Read: MemeCore ($M) Skyrockets 14% After Massive Short Squeeze Hits Bears
Liquidity Collapse Looms as Governance Confidence Erodes
The scope of this breach has significantly damaged CrediX_fi’s operational credibility and on-chain governance. Since multiple high-level roles were involved in the exploit, the platform now faces a severe trust deficit.
Users have been in the dark since developers did not communicate regarding post-incident auditing or the fix of security issues. Trust in acUSDC and other related tokens has experienced a severe fall, and token trust has plummeted. Liquidity is supposed to drop very fast when holders close positions.
Also, role centralization in the ecosystem has turned out to be a single point of failure. A position with superior powers in various systems enabled the breach to continue. There has also been a lack of transparent remediation efforts that have continued to jeopardize already shaken investor sentiment.
Owing to this, a significant number of observers are demanding an impartial forensic review and external audit. Unless these measures are undertaken, not much can be done to restore credibility. Investors are highly recommended not to take new exposure to CrediX-related assets or trade in any product until the measures are implemented.
CrediX_fi’s exploit highlights a critical flaw in permission management within decentralized platforms. The breach has not only resulted in heavy financial losses but also exposed systemic vulnerabilities that demand urgent attention.
Also Read: XRP Update: Ripple CTO’s XRPL Server Now Live, Boosting Network Ahead of Full Rollout
