MonitoringCryptoSecurity incidentFirst tracked 2026-09-18Last changed 2026-09-18
Current outcome
A three-year-old Radix Engine bug, introduced in a 2023 code refactor and missed by an external audit, enabled a roughly $1.3 million vault drain and forced validators to halt the Radix blockchain for 10 days.
Progress timeline
1 material updates- #01
3-year-old bug triggers $1.3 million drain and forces 10-day blockchain halt
A three-year-old Radix Engine bug, introduced in a 2023 code refactor and missed by an external audit, enabled a roughly $1.3 million vault drain and forced validators to halt the Radix blockchain for 10 days.
Source evidence: CryptoSlate