Solana-based DeFi lender CrediX exploited; attacker granted admin access and drained liquidity pool

Key Takeaways

CrediX suffered an exploit after an attacker gained multisig admin and bridge controller roles, draining the protocol’s pool.
The incident pressured CrediX to disable its web site.

CrediX, a Solana-based decentralized finance (DeFi) platform that tokenizes personal credit score, was exploited on Monday, in line with an announcement launched the identical day.

Credix appears to have had a safety breach. We’re investigating and can share particulars quickly

— CrediX (@CrediX_fi) August 4, 2025

Blockchain safety agency SlowMist, which first flagged the incident, reported that CrediX was exploited after a malicious actor was added as each an Admin and a Bridge through the ACLManager six days earlier than the assault.

🚨SlowMist TI Alert🚨

MistEye detected that @CrediX_fi has been exploited.

The CrediX Multisig Pockets, 6 days in the past, added an attacker as each Admin and Bridge through ACLManager.https://t.co/E6tbBEI76M

This enabled the attacker, performing within the Bridge position, to immediately mint… https://t.co/GiXswzNZqS pic.twitter.com/jJjYR1eyET

— SlowMist (@SlowMist_Team) August 4, 2025

The permissions change enabled the attacker to imagine the Bridge position and mint collateral tokens immediately from the lending pool. Utilizing these illegitimately minted tokens, the attacker borrowed a considerable amount of property, successfully draining the protocol’s liquidity.

CrediX introduced that an investigation is ongoing and, as a precautionary measure, its web site has been quickly disabled to forestall any new consumer deposits.

The crew assured customers that each one funds are secure and may nonetheless be accessed immediately via sensible contracts.

In line with the assertion, full restoration of consumer funds is anticipated inside 24 to 48 hours.

All customers funds will probably be recovered in full inside 24-48 hours

— CrediX (@CrediX_fi) August 4, 2025

CrediX beforehand secured $60 million in credit score financing to assist small and medium-sized enterprises (SMEs) in Latin America via precedence debt financing, collaborating with a US different funding administration agency with a $3 billion portfolio.