The CrediX team has mysteriously vanished following a $4.5 million hack and a widely publicized recovery of stolen funds.
Earlier today, on August 8th, according to alerts from CertiK and Blockscope, the decentralized finance (DeFi) protocol’s official X account has gone inactive, and its website has remained offline since August 4th.
The disappearance comes despite the team’s earlier assurances that funds had been recovered and were being returned to the protocol.
Users were initially told a deal had been made with the attacker and that all assets would be returned within 24–48 hours. Still, the sudden lack of communication has left the community anxious and suspicious.
Details of the August 4 Security Breach
On August 4, Unocrypto reported CrediX suffered a severe security breach that resulted in approximately $4.5 million in losses.
The incident was traced back to the compromise of an administrative account, identified as 0xF321…EC662e, which held multiple high-level permissions, including POOL_ADMIN, BRIDGE, ASSET_LISTING_ADMIN, EMERGENCY_ADMIN, and RISK_ADMIN.
Using the BRIDGE role, the attacker drained and borrowed pool assets, then minted unbacked acUSDC tokens tied to the CrediX Market on the Sonic network.
The breach exposed critical weaknesses in the protocol’s access control systems, a type of vulnerability that has been exploited repeatedly across the DeFi sector.
Also Read: Crypto Exchange BigONE Suffers Major Hack Resulting in Over $27 Million In Losses
Funds Recovery and Initial Reassurance
Remarkably, just one day later, on August 5, Unocrypto reported that CrediX had successfully recovered the full $4.5 million in stolen assets.
The hacked funds, which had been bridged to the Ethereum network through a wallet funded by the sanctioned crypto mixer Tornado Cash, were reportedly brought back into CrediX’s treasury.
It was the blockchain security firm Cyvers that first rang the alarm bell over suspicious transactions and helped track down the movement of stolen assets.
At the time, CrediX was giving assurances to the community that the funds were safe and that operations on the protocol would soon regain some semblance of stability.
Also Read: Crypto Hackers Exploit SuperRare Staking Contract Of $731K $RARE Tokens, Here’s All
Sudden Silence Raises Alarm in the Crypto Community
However, following the recovery announcement, events took a troubling turn. Reports from Blockscope indicate that despite promises of asset return, the CrediX team has not provided any further updates.
The X account has gone dark, the website has not been restored, and no official statements have been released.
While blockchain trackers continue to monitor the exploiter’s wallet, portions of the stolen funds have reportedly been moved again to Tornado Cash, raising concerns about whether the recovery claims were genuine or if the project has suffered an internal collapse.
Also Read: CoinDCX Employee Rahul Agarwal & An Engineer Arrested In $44M Exchange Hack
Implications for DeFi Trust and Security
The story of CrediX puts forward the sheer volatility and often opaque nature of the decentralized finance industry. For any kind of high-profile recovery, the vanishing of project teams steals the limelight and leaves investors holding the bag in the matter.
The incident is sufficient to convince individuals of the importance of controversies regarding secure operations, access control, and sincere communication to protect user funds.
For many within the crypto circle, the silence of CrediX raises more questions than the questions instigated by the original hack, bolstering fears of a complete exit of the project from the market despite having managed to claw back stolen assets earlier.
Also Read: Chinese Mining Pool Lubian Loses $3.5 Billion Amid Unnoticed Crypto Hack Four Years Ago, Here’s All