4 Aug 2025
CrediX on Sonic: Admin Access Abuse, ~$4.5M, Reimbursement Pledged
CrediX: on 4 Aug 2025 acknowledged a security breach, disabled the website to stop new deposits, and pledged full recovery of user funds within 24–48 hours. Reports put the drain near $4.5M.
- Event date
- Incident typeProtocol admin compromise
- Bug classAccess control
- Published
Loss, as sourced
About $4.5 million, per contemporaneous reporting. CrediX pledged full reimbursement within 24–48 hours.
Traceability
Primary sources
In brief
Root cause: Described as attacker-granted admin access draining liquidity.
Timeline, as sourced: 4 Aug 2025 acknowledgment and site disable.
Account, as sourced
Claimed (CrediX, quoted): investigating; full reimbursement pledged.
Summaries of public sources as of the published date; except where marked (on-chain), not independently verified by NullMeridian. Figures are the sources’ own and are attributed; where sources disagree, each is given. Sources may since have changed. Not legal, financial or investment advice.
Permalinkhttps://andromeda.observer/e/credix-admin-sonic-2025