Attackers of Radiant Capital compromised the devices of at least three core developers through a malware injection, the company confirmed.
Radiant Capital has disclosed a post-mortem for the Oct. 16 attack that resulted in the theft of over $50 million in digital assets from the BNB Chain and Arbitrum networks. According to Radiant, the attacker compromised the devices of three of its long-standing developers.
Hackers were able to compromise the devices through a “sophisticated malware injection” used to sign malicious transactions.
“The devices were compromised in such a way that the front-end of Safe{Wallet} (f.k.a. Gnosis Safe) displayed legitimate transaction data while malicious transactions were signed and executed in the background,” the Radiant team explained in a blog post.