Please Register !
What Happened?
Please Register !
Crypto lending and money market protocol CrediX has announced the recovery of $4.5 million worth of digital assets that were stolen in a recent exploit. The breakthrough came after the team reached a private agreement with the hacker responsible for the breach.
According to blockchain security company Cyvers, the exploit occurred on Monday, when the attacker used a Tornado Cash–funded wallet to bridge the stolen funds onto the Ethereum network.
Please Register !
Settlement With the Exploiter
Please Register !
In a rather unexpected twist, CrediX revealed that it negotiated directly with the attacker, who agreed to return the stolen funds. In exchange, the exploiter reportedly received a confidential payout from the project’s treasury.
Please Register !
The team also confirmed that the recovered assets will be distributed back to all affected users via airdrop within 48 hours.
Please Register !
Crypto Hacks in 2025 – A Growing Trend
Please Register !
The CrediX incident adds to a growing list of major hacks this year. Blockchain intelligence firm CertiK reported that losses from exploits, scams, and hacks have already surpassed $2.47 billion in the first half of 2025.
In Q2 alone, $800 million was lost across 144 separate incidents, although that was a 52% drop compared to Q1.
Unfortunately, most projects never recover fully after such breaches. Research by Immunefi shows that nearly 80% of cryptocurrencies fail to regain their market value following a hack, which often causes more lasting damage than the theft itself.
Please Register !
Notable Cases
Please Register !
-
July 2025: Another hacker returned $40M stolen from the GMX exploit after negotiating a $5M white-hat bounty.
-
May 2024: A thief surrendered $71M from a wallet poisoning scam under pressure from investigators.
-
SlowMist even tracked the CrediX attacker’s IP addresses to Hong Kong, which might have played a role in their decision to give up the funds.
Please Register !
Hackers Targeting Banks Too
Please Register !
The threat isn’t limited to crypto. On July 5, 2025, Brazilian banking service provider C&M Software was hacked for $140M, affecting six connected financial institutions.
Reports suggest that a C&M employee sold their login credentials for just $2,700, giving the hacker direct access to central bank systems and reserve accounts.
Please Register !
Final Thoughts
Please Register !
The CrediX case shows that while hacks remain a massive problem in 2025, negotiated settlements may sometimes offer a path to partial recovery for victims. Still, relying on attackers’ goodwill is far from a sustainable solution — the crypto industry urgently needs stronger security measures to protect users and funds.
