CrediX hacker agrees to return $4.5m after successful negotiations

CrediX hacker agrees to return $4.5m after successful negotiations

The post CrediX hacker agrees to return $4.5m after successful negotiations appeared on BitcoinEthereumNews.com.

The attacker behind the $4.5 million exploit on CrediX Finance has agreed to return the stolen funds following a settlement with the protocol. Summary CrediX Finance was exploited for $4.5 million via a multisig admin wallet attack. The hacker agreed to return the full amount in exchange for a direct settlement funded by CrediX’s treasury. July 2025 alone saw over $153 million lost to hacks, with this year’s losses now topping $3.1 billion. In an update shared late Monday, CrediX revealed that it has successfully negotiated with the exploiter who drained $4.5 million from its protocol, and is now expecting the return of the stolen funds within 24 to 48 hours.  The deal includes an undisclosed payout from CrediX’s treasury to the hacker in exchange for the safe return of assets, with no mention of legal action or additional terms. “We have good news for our users. Reached successful parley with the exploiter who agreed to return the funds within the next 24-48 hours in return for money fully paid by the credix treasury,” the protocol wrote. Once received, the funds will be used to reimburse affected users. CrediX said it will airdrop each user’s share of the returned assets, ensuring full recovery of losses from the hack. How the CrediX hack happened The attack on CrediX came less than a month after the protocol launched as a real-world asset lending platform, allowing borrowers to receive loans backed by off-chain income and collateral from DeFi lenders. According to security firm SlowMist, the exploit began nearly a week prior to the attack, when hackers gained unauthorized access to the protocol’s multisig admin and bridge wallets. With full control over key infrastructure, the attackers minted collateral tokens, borrowed against the protocol, and quickly drained its liquidity. The stolen funds were then bridged…