Ancilia, a crypto security firm, is under fire after mistakenly sharing a malicious drainer link while attempting to help users impacted by Radiant Capital’s $52 million exploit. On October 16, hackers drained roughly $51.5 million from Radiant Capital by exploiting vulnerabilities in the lending protocol. As users rushed to revoke permissions to safeguard remaining funds, Ancilia stepped in to assist but inadvertently posted a harmful link they believed was from an official source.
Drainer Link Mistaken for Official Source
The shared link led to a wallet drainer, risking further losses for users who clicked and granted permissions. Crypto commentator “Spreek” exposed the incident with a screenshot of Ancilia’s now-deleted post, pointing out that the scam link came from a fake Radiant X account. Spreek criticized Ancilia for the blunder, saying,
“If you’re a trusted security account, you must never make this kind of mistake.”
Details of the Radiant Capital Exploit
The Radiant Capital hack targeted vulnerabilities within the protocol’s smart contracts on Binance Smart Chain and Arbitrum. Crypto security firm De.Fi explained that hackers manipulated the multi-signature wallet, gaining control of three private keys and altering the contracts to steal $51.5 million worth of assets, including USDC, WBNB, and ETH.
This marks the second major security breach Radiant Capital has suffered in 2024, with a $4.5 million exploit in January being the first. Following the latest attack, Radiant announced partnerships with firms like SEAL911, Hyperactive, ZeroShadow, and Chainalysis to prevent further damage.
Phishing and Malware Threats Escalate
Phishing scams remain a persistent threat in the crypto space. In September alone, over 10,800 users lost a combined $46.7 million to phishing attacks, according to Scam Sniffer, a Web3 anti-scam platform. Additionally, cybercriminals continue deploying sophisticated malware. Recent threats include the “Cthulhu Stealer,” which targets macOS users, and crypto mining malware disguised as legitimate software through automated email replies.
These incidents highlight the ongoing challenges of securing the crypto space and the risks users face from phishing and malware attacks.
Disclaimer: This content does not constitute trading or investment recommendations. It’s essential to conduct your own research before purchasing any cryptocurrency or investing in any services.
