{
  "version": 1,
  "event_id": "evt_c6825f2c974ab72c",
  "url": "https://xiyu.news/events/evt_c6825f2c974ab72c/",
  "json": "https://xiyu.news/api/events/evt_c6825f2c974ab72c.json",
  "type": "security_incident",
  "status": "monitoring",
  "category": "crypto",
  "title": {
    "zh": "Radix Engine 旧漏洞致 130 万美元被盗，区块链停摆 10 天",
    "en": "3-year-old bug triggers $1.3 million drain and forces 10-day blockchain halt"
  },
  "current_state": {
    "zh": "Radix 基金会于 9 月 17 日披露，2023 年 6 月对 Radix Engine（负责执行交易并强制执行资产所有权的软件层）的一次重构引入了一个漏洞，该漏洞于 8 月 31 日被利用，攻击者通过 26 笔交易盗走约 126 万美元的跨链资产。随后验证者主动将足够多的质押下线，使共识停止运行超过 10 天；在协议修复加入校验、阻止受限金库引用被用于普通提款后，用户交易于 9 月 11 日恢复。\n\n这是一起实质性的协议级安全失败：该缺陷在执行层潜伏了三年多，还躲过了 Zellic 在 2024 年进行的外部审计，并且调查人员认为它可以被用于攻击网络上的任何金库，这意味着 130 万美元的损失低估了真实风险敞口。它还凸显了一次常规维护性改动如何制造系统性风险，并迫使网络牺牲活性——这一决定本身也会给用户和应用带来代价。\n\n攻击者取走了约 458,915 USDC、72,420 USDT、61.08 ETH、6.35 wrapped Bitcoin、536.16 SOL 和 32.91 BNB，并通过 Hyperlane 将这些资产转移到以太坊、BNB Chain 和 Solana 后换成 ETH；没有私钥被泄露，Hyperlane 本身按设计正常运行。该漏洞改变了引擎处理金库引用的方式，使一笔交易能够指向他人的金库并调用普通提款函数，而未强制执行所有权边界；此外，池子价格被扭曲后，另一个账户从受影响池中提取了数百万 XRD，造成二次损失。",
    "en": "A three-year-old Radix Engine bug, introduced in a 2023 code refactor and missed by an external audit, enabled a roughly $1.3 million vault drain and forced validators to halt the Radix blockchain for 10 days."
  },
  "first_seen_at": "2026-09-18T22:43:49.442762+00:00",
  "last_updated_at": "2026-09-18T22:43:49.442762+00:00",
  "last_material_change_at": "2026-09-18T22:43:49.442762+00:00",
  "confidence": 0.75,
  "updates_count": 1,
  "sources_count": 1,
  "entities": [
    "blockchain-halt"
  ],
  "identifiers": [],
  "topics": [
    "blockchain-halt",
    "protocol-security",
    "radix",
    "smart-contract-vulnerability"
  ],
  "updates": [
    {
      "update_id": "upd_a0df493ffb32ae73",
      "event_id": "evt_c6825f2c974ab72c",
      "occurred_at": "2026-09-18T17:50:45Z",
      "published_at": "2026-09-18T17:50:45Z",
      "first_seen_at": "2026-09-18T22:43:49.442762Z",
      "time_precision": "published",
      "update_type": "initial",
      "material_change": true,
      "title_zh": "Radix Engine 旧漏洞致 130 万美元被盗，区块链停摆 10 天",
      "title_en": "3-year-old bug triggers $1.3 million drain and forces 10-day blockchain halt",
      "what_changed_zh": "Radix 基金会于 9 月 17 日披露，2023 年 6 月对 Radix Engine（负责执行交易并强制执行资产所有权的软件层）的一次重构引入了一个漏洞，该漏洞于 8 月 31 日被利用，攻击者通过 26 笔交易盗走约 126 万美元的跨链资产。随后验证者主动将足够多的质押下线，使共识停止运行超过 10 天；在协议修复加入校验、阻止受限金库引用被用于普通提款后，用户交易于 9 月 11 日恢复。\n\n这是一起实质性的协议级安全失败：该缺陷在执行层潜伏了三年多，还躲过了 Zellic 在 2024 年进行的外部审计，并且调查人员认为它可以被用于攻击网络上的任何金库，这意味着 130 万美元的损失低估了真实风险敞口。它还凸显了一次常规维护性改动如何制造系统性风险，并迫使网络牺牲活性——这一决定本身也会给用户和应用带来代价。\n\n攻击者取走了约 458,915 USDC、72,420 USDT、61.08 ETH、6.35 wrapped Bitcoin、536.16 SOL 和 32.91 BNB，并通过 Hyperlane 将这些资产转移到以太坊、BNB Chain 和 Solana 后换成 ETH；没有私钥被泄露，Hyperlane 本身按设计正常运行。该漏洞改变了引擎处理金库引用的方式，使一笔交易能够指向他人的金库并调用普通提款函数，而未强制执行所有权边界；此外，池子价格被扭曲后，另一个账户从受影响池中提取了数百万 XRD，造成二次损失。",
      "what_changed_en": "A three-year-old Radix Engine bug, introduced in a 2023 code refactor and missed by an external audit, enabled a roughly $1.3 million vault drain and forced validators to halt the Radix blockchain for 10 days.",
      "current_state_zh": "Radix 基金会于 9 月 17 日披露，2023 年 6 月对 Radix Engine（负责执行交易并强制执行资产所有权的软件层）的一次重构引入了一个漏洞，该漏洞于 8 月 31 日被利用，攻击者通过 26 笔交易盗走约 126 万美元的跨链资产。随后验证者主动将足够多的质押下线，使共识停止运行超过 10 天；在协议修复加入校验、阻止受限金库引用被用于普通提款后，用户交易于 9 月 11 日恢复。\n\n这是一起实质性的协议级安全失败：该缺陷在执行层潜伏了三年多，还躲过了 Zellic 在 2024 年进行的外部审计，并且调查人员认为它可以被用于攻击网络上的任何金库，这意味着 130 万美元的损失低估了真实风险敞口。它还凸显了一次常规维护性改动如何制造系统性风险，并迫使网络牺牲活性——这一决定本身也会给用户和应用带来代价。\n\n攻击者取走了约 458,915 USDC、72,420 USDT、61.08 ETH、6.35 wrapped Bitcoin、536.16 SOL 和 32.91 BNB，并通过 Hyperlane 将这些资产转移到以太坊、BNB Chain 和 Solana 后换成 ETH；没有私钥被泄露，Hyperlane 本身按设计正常运行。该漏洞改变了引擎处理金库引用的方式，使一笔交易能够指向他人的金库并调用普通提款函数，而未强制执行所有权边界；此外，池子价格被扭曲后，另一个账户从受影响池中提取了数百万 XRD，造成二次损失。",
      "current_state_en": "A three-year-old Radix Engine bug, introduced in a 2023 code refactor and missed by an external audit, enabled a roughly $1.3 million vault drain and forced validators to halt the Radix blockchain for 10 days.",
      "detailed_summary_zh": "A three-year-old Radix Engine bug, introduced in a 2023 code refactor and missed by an external audit, enabled a roughly $1.3 million vault drain and forced validators to halt the Radix blockchain for 10 days.",
      "detailed_summary_en": "A three-year-old Radix Engine bug, introduced in a 2023 code refactor and missed by an external audit, enabled a roughly $1.3 million vault drain and forced validators to halt the Radix blockchain for 10 days.",
      "background_zh": "Radix 是一条一层网络，其 Radix Engine 负责执行交易并强制执行资产所有权，而金库（vault）则是为用户、应用和流动性池持有代币的链上容器。由于该引擎是 Radix 上所有应用的共享执行层，其中的缺陷会同时影响所有应用，而不只是单个合约。区块链停摆发生在验证者无法就新区块达成共识之时——本次是主动的安全暂停而非崩溃，它会在修复部署前冻结全网转账、跨链桥和合约活动。",
      "background_en": "Radix is a layer-1 network whose Radix Engine executes transactions and enforces asset ownership, with vaults acting as the on-chain containers that hold tokens for users, applications and liquidity pools. Because the engine is the shared execution layer for everything built on Radix, a flaw there affects all applications at once rather than a single contract. A blockchain halt occurs when validators can no longer reach consensus on new blocks — here it was a deliberate safety pause rather than a crash, and it freezes transfers, bridges and contract activity network-wide until a fix is deployed.",
      "community_discussion_zh": "",
      "community_discussion_en": "",
      "market_impact_zh": "传导路径主要集中在 Radix 自身的链上流动性与市场情绪：跨链而来的稳定币及主流资产从交易对的一侧被抽走，导致池子价格扭曲，另一个账户因此得以提取数百万 XRD；而 10 天的停摆则冻结了 RDX 持有者与网络上各应用的转账和跨链桥活动。经 Hyperlane 转移到以太坊、BNB Chain 和 Solana 的资产随后被换成 ETH，从而将该事件与这些场所的流动性状况联系起来。",
      "market_impact_en": "The transmission runs mainly through Radix's own on-chain liquidity and sentiment: bridged stablecoin and blue-chip holdings were removed from one side of trading pairs, distorting pool prices so a separate account could extract millions of XRD, while the 10-day halt froze transfers and bridge activity for RDX holders and applications on the network. Assets moved through Hyperlane to Ethereum, BNB Chain and Solana were subsequently sold for ETH, linking the incident to liquidity conditions on those venues.",
      "importance_score": 8.0,
      "references": [
        {
          "url": "https://docs.radixdlt.com/docs/radix-engine-toolkit/",
          "title": "Radix Engine Toolkit | Radix Documentation"
        },
        {
          "url": "https://cryptoapis.io/blog/634-chain-halt-risk-how-developers-mitigate-it-in-production",
          "title": "Chain Halt Risk: How Developers Mitigate It in Production"
        },
        {
          "url": "https://www.coindesk.com/tech/2021/02/04/yearn-finance-dai-vault-has-suffered-an-exploit-11m-drained",
          "title": "Yearn Finance DAI Vault 'Has Suffered an Exploit'; $11M Drained"
        }
      ],
      "confidence": 0.75,
      "story_ids": [
        "rss:cryptoslate.com_feed_:7226e0f4ab5716b3"
      ],
      "sources": [
        {
          "url": "https://cryptoslate.com/3-year-old-bug-triggers-1-3-million-drain-and-forces-10-day-blockchain-halt/",
          "label": "CryptoSlate",
          "source_type": "rss",
          "official": false
        }
      ]
    }
  ]
}