Overview

• CrediX’s recovery deadline expired with no repayments and its website, X account and Telegram channel have been deactivated.
• Security firms CertiK and PeckShield say a compromised multisig admin account enabled the attacker to mint unbacked tokens and drain $4.5 million.
• Stability DAO, Sonic Labs and Trevee have launched a joint investigation and collected identity records for two CrediX team members for legal filings.
• No stolen assets have been returned or traced on-chain since the exploit drained liquidity from CrediX’s Solana-based pools.
• The incident underscores persistent governance vulnerabilities in DeFi and renews calls for stricter multisig controls and real-time protocol monitoring.