CrediX DeFi Protocol Suspected of Exit Scam After $4.5 Million Exploit

The team behind Sonic-based DeFi lender CrediX has vanished following a $4.5 million security breach, sparking exit scam allegations. CertiK confirmed the disappearance after the protocol's website went offline August 4 and its X account was abruptly deleted.

PeckShield's forensic analysis revealed the hack stemmed from a compromised admin account, allowing the attacker to mint unbacked acUSDC tokens on Sonic Network before bridging stolen funds to Ethereum. Blockchain sleuths at SlowMist identified suspicious multisig wallet activity six days prior, when an unknown address was granted admin privileges.

Despite initial promises of refunds, CrediX's team ceased all communication after disabling deposits. The incident highlights persistent vulnerabilities in DeFi governance structures, particularly around privileged access controls.