Radiant Capital Shuts Down Permanently, Nearly Two Years After Devastating $50 Million Malware Hack
By Global Finance & Technology Desk
Published: August 2025
Executive Summary: The End of an Era for Cross-Chain Lending
Decentralized finance (DeFi) lending protocol Radiant Capital (RDNT) has officially announced its permanent shutdown, marking a somber conclusion to a prolonged battle for recovery following one of the most sophisticated cyberattacks in the history of the sector. The platform’s closure comes nearly two years after malicious actors siphoned an estimated $50 million in digital assets from its liquidity pools.
The shutdown underscores the persistent, existential threats posed by advanced persistent threats (APTs) targeting core contributors and developers within the Web3 ecosystem. Despite exhaustive post-incident mitigation efforts, involvement from international law enforcement agencies, and collaboration with top-tier blockchain security firms, Radiant Capital has determined that continuation is no longer viable. The native token, RDNT, languishes at approximately $0.022, a stark reflection of the protocol’s diminished standing, while the perpetrators behind the exploit have successfully laundered and profited handsomely from their ill-gotten gains.
Chronology of a Catastrophe: From Breach to Shutdown
The demise of Radiant Capital did not happen overnight; it is the culmination of a meticulously planned cyberattack that unfolded across multiple phases, leaving developers and users paralyzed.
October 2024: The Attack Vector
The roots of the disaster trace back to October 2024, when Radiant Capital fell victim to what security analysts classified as a "highly advanced malware injection." Rather than exploiting a traditional smart contract vulnerability or a flash-loan flaw in the protocol’s codebases, the attackers went straight for the human element: the core development team’s hardware wallets.
During a routine multi-signature (multisig) emissions adjustment process—a standard administrative procedure designed to optimize protocol yields and adapt to shifting market conditions—several core developers had their devices compromised.
According to forensic reports, the malware was engineered to subvert the physical display layer of the hardware security tools. While the Safe Wallet (formerly Gnosis Safe) user interface presented legitimate, expected transaction data to the signing developers, malicious payloads were surreptitiously substituted and executed in the background. Unknowingly, the developers approved permissions that handed administrative control of the protocol’s cross-chain lending markets directly to the hackers.
The Immediate Aftermath and Asset Drain
Within hours of the multi-sig compromise, the attackers drained approximately $50 million worth of cryptocurrency assets across various networks where Radiant maintained liquidity pools. Because Radiant operated as a cross-chain lending protocol spanning multiple Layer-1 and Layer-2 networks, the stolen funds were immediately fragmented and routed through various decentralized exchanges (DEXs) and privacy mixers to obscure their origin.
Late 2024 to August 2025: The Long Standoff
Following the exploit, Radiant Capital suspended operations on affected chains and formed an emergency response task force. The team partnered with Web3 security firm zeroShadow and engaged law enforcement agencies in multiple jurisdictions. However, the decentralized and pseudonymous nature of the blockchain made freezing or recovering the funds an uphill battle.
On-chain data compiled by blockchain analytics firm Lookonchain revealed that the hacker managed to consolidate the stolen assets over the months following the breach. By August 2025, the perpetrator had converted the assorted altcoins into roughly 21,957 Ethereum (ETH). Capitalizing on market movements throughout mid-2025, the hacker began offloading the ETH at an average price of $4,562 per coin. By the time Radiant announced its final shutdown, the attacker had realized an astonishing 93.5% profit on the original loot, completely evading effective asset seizure.
Supporting Data and Financial Metrics
The financial trajectory of Radiant Capital mirrors the grim reality often faced by DeFi protocols that suffer catastrophic security failures. Below is a breakdown of the key figures defining the incident:
- Total Stolen Funds: ~$50 million (at the time of the October 2024 exploit).
- Token Converted: ~21,957 Ethereum (ETH).
- Liquidation/Sell-off Period: August 2025.
- Average Hacked ETH Sale Price: $4,562 per coin.
- Attacker’s Realized Profit Margin: Approximately 93.5%.
- RDNT Token Price (August 2025): $0.022.
These metrics illustrate not only the scale of the original loss but also the compounding damage inflicted on tokenholders as market confidence evaporated and recovery efforts stalled.
Official Responses and Post-Mortem Analysis
In its official post-mortem statement released to the community, Radiant Capital detailed the mechanical failure that allowed the hack to occur:
"The devices were compromised in such a way that the front-end of Safe Wallet displayed legitimate transaction data while poisoned transactions were signed and executed in the background. This breach occurred during a routine multi-signature emissions adjustment process, which takes place periodically to adapt to market conditions and utilization rates."
Security experts have since pointed out that this incident represents a terrifying evolution in crypto-related cybercrime. Supply-chain attacks targeting developer environments and hardware wallets bypass traditional smart contract audits entirely. When trusted infrastructure tools like Safe Wallet can be manipulated via compromised local development environments, the traditional paradigm of "don’t trust, verify" faces unprecedented strain, as developers can no longer entirely trust what is rendered on their hardware device screens.
Law enforcement agencies and intelligence partners continued their investigations into 2025, but the utilization of sophisticated cross-chain bridges and privacy tools made tracing the ultimate beneficiaries extremely difficult.
Broader Implications for the DeFi and Cross-Chain Ecosystem
The permanent closure of Radiant Capital carries profound implications for the wider decentralized finance industry, touching upon security standards, governance models, and user trust.
1. The Human Element Remains the Weakest Link
While DeFi protocols routinely spend millions of dollars on rigorous smart contract audits, formal verifications, and bug bounties, the Radiant Capital exploit proves that the operational security (OpSec) of core contributors is often the path of least resistance for sophisticated threat actors. Protecting code is no longer enough; projects must secure the laptops, hardware wallets, and physical environments of every individual with administrative privileges.
2. The Vulnerability of Cross-Chain Protocols
Cross-chain and omnichain lending protocols inherently introduce complex attack surfaces. By bridging assets and liquidity across disparate networks, a single point of failure at the governance or multi-sig layer can cascade across multiple ecosystems simultaneously. The total devastation experienced by Radiant serves as a cautionary tale for other multi-chain architectures.
3. Regulatory and Legal Precedents
The inability of law enforcement to recover funds stolen via advanced malware highlights the ongoing jurisdictional and technical hurdles facing victims of crypto crimes. As decentralized protocols continue to operate in legal grey areas, user recourse remains severely limited when treasury funds are drained and subsequently laundered through decentralized protocols.
4. Market Sentiment and Accountability
The collapse of RDNT to $0.022 and the protocol’s subsequent wind-down demonstrate the unforgiving nature of modern crypto markets. Investors are increasingly punishing protocols that fail to maintain robust security frameworks or successfully recover from exploits. As the dust settles on Radiant Capital, the protocol stands as a permanent reminder of the high stakes—and high risks—inherent in the evolution of decentralized finance.
