Decentralized finance platform CrediX was exploited for approximately $4.5 million in early August 2025 due to a compromised multisig admin account. The attacker, added as both an admin and bridge controller six days prior to the exploit, abused the bridge role to mint unbacked acUSDC tokens and drain liquidity by borrowing against phantom collateral. The attack occurred just weeks after CrediX's launch and put a previously secured $60 million credit line at risk. Following the incident, the platform's website was taken offline and its social media accounts were deleted. The CrediX team has since vanished, leading to suspicions of an exit scam. Despite initial claims of a deal with the hacker, no funds have been returned. Blockchain security firms including CertiK and SlowMist have confirmed the exploit and noted the project’s inactivity post-attack. Stability DAO is reportedly preparing a legal report in response to the incident.
On Friday, blockchain security firm @CertiK said on X that CrediX team “has disappeared,” noting that the protocol’s X is now inactive, and its website has been offline for four straight days. https://t.co/50n8UpXMu1
On Aug 4, 2025, CrediX was exploited for ~$4.5M in a suspected exit scam. The attacker minted tokens via bridge role abuse before the project’s X account and site went dark. Read more in the @CoinDesk article 👇 https://t.co/X8vnPUeodD
BREAKING: CrediX rug incoming?🚨 After a $4.4M exploit, the team claimed a deal with the hacker. 🧐Now the X account is gone, the site is down and no funds have been returned Looks like more than just a hack. https://t.co/wmgPSDKvLU