PeckShield: Credix Suffers Attack with Losses of Approximately $4.5 Million

According to ChainCatcher, security monitoring by PeckShield has revealed that CrediX suffered a security breach today, with hackers exploiting a compromised administrator account that held multiple management permissions. This account had the following privileges: POOL_ADMIN (pool administrator), BRIDGE (cross-chain bridge access), ASSET_LISTING_ADMIN (asset listing administrator), EMERGENCY_ADMIN (emergency administrator), and RISK_ADMIN (risk control administrator).

The attacker leveraged the BRIDGE privilege to steal or borrow assets from the pool, with estimated losses of approximately $4.5 million. The incident also involved the minting of counterfeit acUSDC tokens (Credix Market Sonic USDC) that were not backed by real assets.

Previous reports indicated that CrediX has already taken its website offline and suspended user deposits. Users who need to take action are advised to withdraw via smart contract.