NullMeridianLog

4 Aug 2025

CrediX on Sonic: Admin Access Abuse, ~$4.5M, Reimbursement Pledged

CrediX: on 4 Aug 2025 acknowledged a security breach, disabled the website to stop new deposits, and pledged full recovery of user funds within 24–48 hours. Reports put the drain near $4.5M.

  • Event date
  • Incident typeProtocol admin compromise
  • Bug classAccess control
  • Published

Loss, as sourced

About $4.5 million, per contemporaneous reporting. CrediX pledged full reimbursement within 24–48 hours.

Traceability

Primary sources

  1. 01x.comCrediX on X (4 Aug 2025) (opens in a new tab)

In brief

Root cause: Described as attacker-granted admin access draining liquidity.

Timeline, as sourced: 4 Aug 2025 acknowledgment and site disable.

Account, as sourced

Claimed (CrediX, quoted): investigating; full reimbursement pledged.

Summaries of public sources as of the published date; except where marked (on-chain), not independently verified by NullMeridian. Figures are the sources’ own and are attributed; where sources disagree, each is given. Sources may since have changed. Not legal, financial or investment advice.