Radiant Capital hacker almost doubles stolen funds through ETH trading
The hacker behind last year’s $53 million Radiant Capital exploit has nearly doubled the value of the stolen funds through a well-timed Ethereum trading strategy.
- The Radiant Capital hacker increased stolen funds from $53M to $94M through ETH and DAI trading.
- The October 2024 attack exploited Radiant’s multisig wallet using macOS malware.
- Attribution points to North Korea-linked AppleJeus, with little chance of recovery.
According to on-chain analyst EmberCN’s Aug. 19 X post, the hacker had earlier sold 9,631 Ethereum (ETH) at an average of $4,562 for 43.9 million Dai (DAI), only to buy back 2,109.5 ETH for $8.64 million DAI once prices pulled back to $4,096.
The wallet now holds 14,436 ETH and 35.29 million DAI, a portfolio worth $94.63 million. This represents a gain of more than $41 million over the initial value of the stolen funds. Blockchain analytics firm Lookonchain noted that the decision to keep most of the assets in ETH during its rally played a major role in the increased balance.
From $53 million heist to $94 million stash
The October 2024 breach of Radiant Capital, a multi-chain decentralized finance protocol, was one of the most damaging attacks of the year. By compromising the multisignature wallet of its core team through a macOS-specific malware called INLETDRIFT, the attacker siphoned tokens from lending pools on Arbitrum (ARB) and BNB (BNB) Chain.
At the time, the stolen assets were quickly converted into 21,957 ETH, then valued at about $53 million when Ethereum was trading near $2,500. Rather than liquidating the holdings, the hacker held ETH as its price climbed. In recent weeks, the attacker executed several trades to increase exposure.
Radiant Capital hack attribution and ongoing risks
The attack has been linked by some blockchain security experts to North Korea’s AppleJeus group, known for targeting exchanges and DeFi protocols. Radiant Capital worked with the FBI, Chainalysis, and Web3 security firms like SEAL911 and ZeroShadow after the hack, but recovery prospects remain slim as the funds continue to move through Ethereum-based trading activity.
The October incident marked the second breach of Radiant in 2024, following a smaller $4.5 million flash loan exploit earlier that year. It underscored persistent security risks in DeFi, which has already seen significant losses in 2025.
With over $94 million now under control, the attacker’s next move will be closely watched by analysts and security teams.
You May Also Like
The whale "pension-usdt.eth" has reduced its ETH long positions by 10,000 coins, and its futures account has made a profit of $4.18 million in the past day.
Fed Chair Powell says FOMC is divided on additional rate cuts in 2025
Powell said the Federal Open Market Committee is weighing interest rates on a meeting-by-meeting basis, with no long-term consensus. US Federal Reserve Chair Jerome Powell said the 19 members of the Federal Open Market Committee (FOMC) remain divided on additional interest rate cuts in 2025.At Wednesday’s press conference after the Fed’s 25-basis-point rate cut, Powell said the central bank is trying to balance its dual mandate of maximum employment and price stability in an unusual environment where the labor market is weakening even as inflation remains elevated. Powell said:Powell said that the “median” FOMC projection from the Federal Reserve’s Summary of Economic Projections (SEP), the Fed’s quarterly outlook for the US economy that informs interest rate decisions, projected interest rates at 3.6% at the end of 2025, 3.4% by the end of 2026, and 3.1% at the end of 2027.Read more
