The DeFi protocol CrediX Finance, operating on the Sonic network, ceased operations on August 4, 2025, due to a massive hacker attack that resulted in the theft of approximately $4.5 million. The incident occurred less than a month after the project’s launch, causing a stir in the crypto community.
This is reported by Business • Media
Details of the Hack and Company Response
According to analysts from the cybersecurity firm CertiK, hackers transferred assets from the Sonic network to Ethereum. Experts determined that the stolen funds were distributed among three wallets, but the exact method of the hack is currently unknown. Immediately after the breach was detected, the website’s operations were suspended, and representatives of CrediX promised to return all lost funds to users within 24-48 hours.
“Credix seems to have had a security breach. We are investigating and will share details soon”.
Mechanism of the Attack and Industry Implications
Experts from SlowMist clarified that the hacker gained access to the multi-signature wallet and control over the bridge a few days before the incident, allowing them to create collateral and take out large loans. This enabled the perpetrator to withdraw a significant portion of liquidity from the platform’s pool.
Despite the new product operating for only a few weeks, the CrediX platform itself was founded in 2021 and specializes in lending against real-world assets (Real World Assets, RWA). Previously, the company secured a credit line of $60 million.
Experts note that attacks on multi-signature wallets have become one of the main threat vectors in the DeFi sector in 2025. According to CertiK, similar incidents in the first half of the year caused losses exceeding $3.1 billion, indicating the growing vulnerability of decentralized finance infrastructure.
It is worth mentioning that recently, Arkham Intelligence revealed a record Bitcoin theft of $3.5 billion — the largest in the industry’s history.