3-year-old bug triggers $1.3 million drain and forces 10-day blockchain halt
A routine Radix code refactor created a vault flaw that enabled a roughly $1.3 million theft and later forced validators to halt the blockchain.
The Radix Foundation said Sept. 17 that an RDX Works development team introduced the defect during a June 2023 cleanup of the Radix Engine, the software layer that executes transactions and enforces asset ownership across the network. The vulnerability remained undetected for more than three years before an attacker exploited it on Aug. 31.
A community reconstruction of the ledger shows the attacker withdrew about 458,915 USDC, 72,420 USDT, 61.08 ETH, 6.35 wrapped Bitcoin, 536.16 SOL and 32.91 BNB across 26 transactions. The assets were worth roughly $1.26 million using Aug. 31 market prices, and the attackers took another 13,000 XRD from a vault to pay transaction fees. The two stablecoins alone accounted for about $531,335.
The stolen assets were sent through Hyperlane to Ethereum, BNB Chain, and Solana, then sold for ETH, Radix said. Hyperlane itself operated as designed: the attacker had already obtained the assets through the Radix Engine before using the bridge to move them elsewhere. No private keys were compromised.
However, the immediate loss understated the potential exposure. Radix investigators concluded the flaw could have been used against any vault on the network, putting tokens and other assets beyond the bridged holdings targeted by the attacker at risk.
As a result, network validators deliberately took enough stake offline to prevent it from reaching consensus and stopping additional transactions while developers worked on a fix.
Radix audit miss turns maintenance bug into systemic failure
The vulnerability had already survived an independent security review before the attacker found it.
Zellic audited the Radix protocol in 2024, including the engine kernel containing the defect. The review did not detect the authorization flaw, even though the vulnerable code had been introduced during the previous year's refactor.
The bug changed how the engine handled vault references. A transaction could identify another user's vault by its internal address and pass that reference into purpose-built smart-contract code. The engine then allowed ordinary withdrawal functions to be called without properly enforcing the ownership boundary that should have rejected the request.
That gave the attacker access to assets held by user accounts, applications and liquidity pools without obtaining the owners' signatures.
The Foundation said the attacker completed 26 exploit transactions between 16:02 and 16:57 UTC on Aug. 31. Once investigators determined the vulnerability existed in the execution layer rather than a single application, validators coordinated to stop transaction finalization.
The halt lasted more than 10 days. A protocol fix added checks preventing a restricted vault reference from being used for an ordinary withdrawal, and user transactions resumed Sept. 11, according to the community ledger reconstruction.
The incident also produced secondary losses in liquidity pools after the attacker removed bridged assets from one side of trading pairs. The distorted prices allowed another account to extract millions of XRD from affected pools, showing how an execution-layer failure can keep causing economic damage even after the initial assets have left the network.
Radix said it is adding regression tests, strengthening its security review process, and formalizing the emergency procedure validators used to break network liveness.
The Foundation also said future security work must account for increasingly capable AI-assisted code-analysis tools, which it believes may have helped the attacker identify the years-old defect.
For developers and validators, the next challenge is preventing similarly routine maintenance work from silently altering security assumptions that external audits may miss.
That task extends beyond repairing the exploited code. Radix now has to strengthen the review process around changes to authorization logic while restoring confidence among users and liquidity providers whose assets ultimately depend on the engine enforcing those boundaries correctly.
-- Price
This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.
You may also like

Jon Leaves Hyperlane to Join Open Standard as Marketing Head

TRON Industry Weekly Report: Stagflation May Lead BTC to Test $80,000 Support Again, Detailed Explanation of Building Chain Abstract Web3 Experience Infrastructure Newton

Autheo THEO token plunges 92% after suspected bridge exploit

Radix Foundation Fixes Vault Authorization Vulnerability, Cross-Chain Asset Withdrawal Incident Resolved

$7.6 Trillion AI Infrastructure Investment Pressures Hyper-scalers' Cash Flow

Hyperliquid opens low-latency data access under $1K

What is revenge trading? The trading minute

Circle vs OUSD: The Battle Between Open Standard (OUSD) and Floating Reserves of Stablecoins

Iore Acquires Cryptocurrency HYPE, First Acquisition by a Listed Company in Japan

Humanity Discloses H Token Dual-Chain Attack Details, With Losses on Ethereum and BSC Exceeding $36 Million
Humanity said the H token attack across Ethereum and BSC caused more than $36 million in losses after leaked ProxyAdmin keys enabled malicious contract upgrades and token minting.

Stablecoins offer sub-cent payments, Armstrong says, as critics flag risks

Analysis: Stablecoins, Payments, and Prediction Markets Have Become New Growth Points for Crypto Companies, but Profitability Remains Challenged

Nubank Suspends Crypto Withdrawals: What We Know So Far

Buffett's Successor Faces Setback, Google Holdings Show $3 Billion Unrealized Loss

Banking Outage in Japan: 128 Banks 'Frozen' at Once

Beyond APY: Saying Goodbye to Black Box Trust and Reassessing the Security Logic of ETH Staking

Argentine Bitcoiners Debut “The Genesis Of Satoshi Nakamoto” Artwork In Downtown Buenos Aires

Broadcom (AVGO) : AI Growth, Fund Positioning, and Guarantee Risk
Broadcom (AVGO) recently fell with the semiconductor sector, closing down 10.43% at $291.53 on November 5. The shares rebounded more than 4% in premarket trading on November 6. Concerns that election results could lead to tighter AI rules and slower data center approvals contributed to a broad sell-off, with a semiconductor index falling about 12%. The move appears tied mainly to sector sentiment and policy concerns, with no clear company-specific negative catalyst identified.
Institutional trading and AI growth expectations are also in focus. ARK funds sold about $134 million of Broadcom shares over two sessions while adding to SpaceX. Citi maintained its Buy rating and projected that Broadcom’s AI semiconductor revenue could reach $115 billion in fiscal 2027, roughly doubling year over year. Broadcom had approximately $179.2 billion in signed contracts as of the prior quarter, while analysts estimated fourth-quarter AI chip revenue at about $21.7 billion. These forecasts will need to be tested against future results.
Contingent guarantees are another point for investors to monitor. Broadcom is providing guarantees tied to Anthropic’s AI rack-leasing arrangement, involving about $29 billion in the first phase and a second-phase plan of up to $43 billion. Banks plan to issue $21 billion in bonds to support related chip financing. The guarantee amounts are not the same as debt already incurred, but they add a potential risk to assess. Broadcom is scheduled to report its next quarterly results on December 9, when management’s outlook for fiscal 2027 AI demand will be closely watched. This article is for informational purposes only and is not investment advice.

Netflix (NFLX) Stock Rebounds: Insider Sales, Advertising, and Growth Plans
Several Netflix executives sold company shares in early November 2026. Co-CEO Theodore Sarandos sold 27,312 shares from November 3 to 4, valued at about $1.81 million. CFO Spencer Neumann sold shares worth approximately $612,000. Co-CEO Gregory Peters realized about $1.69 million, including transactions related to tax withholding. Chief Legal Officer David Hyman and director Bradford Smith also reduced their holdings. Executive sales can have different reasons and should not be viewed on their own as a measure of the company’s outlook.
After recent pressure, Netflix shares rebounded more than 4% around November 4. Bill Ackman’s Pershing Square Capital Management allocated about 5% of its portfolio to Netflix, while new AI features and positive views on the company’s technology prospects helped sentiment. Netflix reported third-quarter 2026 revenue of $13.44 billion and earnings per share of $0.87, both above expectations, though its forward outlook remains a key focus.
Advertising is one of Netflix’s main challenges. Delays to key ad product features led the company to reduce its annual advertising revenue outlook from $3 billion to $2.7 billion. Viewer engagement has also faced pressure from changes in content appeal and competition from platforms such as YouTube. Netflix is pursuing growth through live events, gaming, and advertising, with plans to expand its ad-supported offering to 15 markets while adjusting its workforce by about 6% to improve margins. Investors may want to monitor advertising growth, engagement, and profitability. This article is for informational purposes only and is not investment advice.

Carvana Earnings: Record Sales, Strong Profit, and Insider Share Sales
Carvana reported third-quarter net revenue of $8.04 billion, up 42.4% year over year and above the $7.7 billion market estimate. Retail units sold reached a record 217,385, an increase of 39.4%. Net income rose to $483 million, while adjusted EBITDA reached a record $800 million, reflecting gains in both revenue and profitability.
Management expects full-year 2026 adjusted EBITDA to reach the upper end of its $2.7 billion to $3.0 billion range. Needham maintained its Buy rating, named Carvana a top pick in transportation technology, and set a $100 price target. Strong results and guidance have drawn investor attention, though continued performance will depend on sales, margins, and operating costs.
Insider transactions are also on investors’ radar. A regulatory filing indicates that CFO Mark Jenkins planned to sell 63,800 shares on November 2, 2026, valued at approximately $4.35 million. Since August, he has planned sales totaling 191,300 shares. An executive share sale alone does not determine a company’s outlook; investors may also consider earnings, cash flow, and future guidance. This article is for informational purposes only and is not investment advice.

FCEL Stock: Data Center Opportunity, Manufacturing Costs, and Lawsuit Risk
FuelCell Energy (ticker: FCEL) provides fuel-cell power solutions. Growing electricity demand from AI data centers could create new business opportunities, while proposed pauses on new data center approvals in some areas have raised concerns about project timelines. A 75-megawatt power project may be affected, and FCEL shares recently fell as much as about 17% in a single session amid policy concerns.
FCEL signed an agreement with Fit Energy to provide up to 380 megawatts of fuel-cell power solutions. Its backlog is approximately $3.6 billion, with about 97% of its sales pipeline related to data centers. The company also drew the second installment under a $49 million financing arrangement backed by an export credit agency, supporting a green energy project and clean-energy exports. Recent leadership changes include Matthew Latino becoming CFO, digital infrastructure executive Peter Hopper joining the board, and John Dansby leading manufacturing scale-up. Converting orders into revenue will depend on production capacity, costs, and project execution.
FCEL reported third-quarter revenue of about $33 million, down approximately 29% year over year, and a net loss of roughly $45.3 million. Product costs and manufacturing overhead for the Fit Energy agreement exceeded the contract pricing, resulting in an approximately $17 million contract impairment charge. Securities class-action allegations concern disclosures about manufacturing capacity and costs; the case remains in the legal process. The deadline to seek appointment as lead plaintiff is November 10, 2026. FCEL’s growth opportunities come with execution, financing, and litigation risks. This article is for informational purposes only and is not investment advice.

Democratic Party's AI Regulation Push Revealed: Plans for Intensive Legislation and Strict Scrutiny of Tech Giants

PFE Stock: Pfizer’s Q3 2026 Earnings, Business Strategy, and Dividend Outlook
PFE is the New York Stock Exchange ticker for Pfizer Inc. In the third quarter of 2026, Pfizer reported revenue of $16.58 billion and adjusted earnings per share of $0.87, both above market expectations. The company raised its full-year revenue outlook to $62 billion–$64 billion and its adjusted EPS guidance to $2.95–$3.05, pointing to stronger performance than previously expected.
Although demand for COVID-related products continues to decline, Pfizer’s non-COVID business is growing. Third-quarter sales reached $720 million for the cancer drug Padcev and $2.52 billion for Eliquis, up 25% year over year. Revenue from newer and acquired products rose 32%. Pfizer is expanding its oncology pipeline, entering the weight-loss treatment market through its acquisition of Metsera, and targeting approximately $9.7 billion in net cost savings by 2029. Cecile Guegan has also taken over as chief financial officer.
Investors are also watching Pfizer’s dividend and legal developments. The company declared a cash dividend of $0.43 per share, with an ex-dividend date of November 6, 2026. Analysts raised some earnings estimates and price targets following the quarterly results. Pfizer also faces ongoing legal scrutiny related to statements about COVID vaccine safety, while its subsidiary Mylan has sued Novo Nordisk over generic-drug patent issues involving Wegovy. Pfizer’s outlook depends on new-product growth, cost savings, patent matters, and litigation developments. This article is for informational purposes only and is not investment advice.

South Korea’s GOPAX halts crypto trading, withdrawals after hacking threat

Bhutan: A royal decree opens the future central bank's reserves in Gelephu to cryptocurrencies

AI Begins to Shake Google's Search Advertising Business Behind $500 Billion Market Value Erosion

What is the real challenge for South Korean exchanges now that the regulatory framework is in place?

What Is TLT? Long-Term Treasury Bonds After the Midterm Election

Former FBI Agent Pleads Guilty to Stealing $2.5M in Crypto From 35 Investigations










