In a chilling reminder of DeFi’s vulnerabilities, Radiant Capital has revealed it fell victim to a $50 million hack orchestrated by North Korean hackers. The attackers, known for their meticulous planning, leveraged social engineering tactics and malware to infiltrate the platform.
The Setup: How Hackers Gained Access
It all started with a simple Telegram message. On September 11, a Radiant developer received a request from someone posing as a former contractor. The message included a zip file labeled as a new project proposal for feedback.
Radiant explained in a post:
“The ZIP file, shared among our team for review, contained sophisticated malware that compromised our development environment.”
Once opened, the malware silently spreads to other devices, giving attackers access to critical private keys and smart contracts.
Inside the Heist: The Hack in Action
The hackers waited patiently before striking. By mid-October, they had infiltrated Radiant’s smart contracts and manipulated front-end transaction displays. This allowed them to conduct malicious transactions undetected by both users and automated systems.
Blockchain analysts estimate that the heist’s total damage amounts to $50 million in digital assets.
North Korea’s Cyber Arsenal
Mandiant, a leading cybersecurity firm, attributed the breach to a North Korean-affiliated group named “UNC4736” or “Citrine Sleet.” The group is thought to be connected to the infamous Lazarus Group, known for targeting cryptocurrency platforms to fund North Korea’s operations.
In a statement, Radiant noted:
“Even our stringent operational procedures, including hardware wallets and transaction simulations, couldn’t prevent this breach.”
This underscores the increasing sophistication of state-sponsored cyberattacks on DeFi platforms.
The Fallout: Trust Takes a Hit
Radiant Capital has been no stranger to attacks. Earlier this year, the platform suffered a $4.5 million flash loan exploit. However, this $50 million breach has had a devastating impact, eroding user trust and shrinking the platform’s total value locked (TVL) to just $5.81 million, down from over $300 million.
A user tweeted in frustration:
“Radiant Capital’s repeated breaches are a wake-up call for DeFi platforms. Security can’t be an afterthought anymore.”
Lessons for the DeFi Industry
This latest breach highlights a critical need for DeFi platforms to evolve their security measures. Social engineering attacks, like the one used here, exploit human trust rather than technical vulnerabilities, making them particularly hard to defend against.
Radiant has called for a more robust focus on hardware-level security and transaction validation tools to prevent similar incidents in the future.
The Future of DeFi Security
The Radiant Capital hack is more than just another cybercrime; it’s a call to action for the entire DeFi industry. As hackers become more sophisticated, platforms must rethink their security frameworks, investing in tools and strategies that can outpace even the most advanced attackers.
With user trust hanging in the balance, the need for innovation in DeFi security has never been more urgent.
I am Toby Rothschild, Co-Founder of Spearmint and author at Coinography, and a strategist focused on advancing Web3 innovation, digital ecosystems, and the future of decentralized technology. I combine product thinking, creative leadership, and deep interest in emerging trends to help shape how individuals and organizations interact with the next generation of digital systems.
My work centers on understanding how blockchain, AI, and digital identity are reshaping global industries. At Spearmint, I help lead the direction of initiatives that bring clarity, structure, and meaningful user experiences to complex technological environments. I focus on bridging vision with execution, ensuring that innovation remains practical, scalable, and aligned with long-term growth.
As an author at Coinography, I create insights that translate fast-moving Web3 developments into clear, useful narratives. I explore topics such as decentralized governance, digital identity, creator economies, token models, protocol design, and the shifting cultural patterns around emerging technology. My aim is to make digital transformation more understandable and approachable for a wider audience.
I believe that Web3 is not only a technological shift but a cultural and creative one. Strong ideas, thoughtful communication, and human-centered design will shape which technologies thrive and how communities evolve around them. My writing and research reflect this belief, focusing on clarity, relevance, and long-term perspective.
Professional Links Website: https://coinography.com LinkedIn: https://www.linkedin.com/in/tobyrothschild/
