Radiant Capital Winds Down to a $2M Husk, 20 Months After DPRK-Linked $50M Heist

Why It Matters

The collapse underscores how state‑sponsored cyber‑attacks can devastate DeFi projects, eroding user confidence and highlighting the need for stronger security and remediation frameworks.

Key Takeaways

• Radiant's TVL fell to $2.21 M, market cap under $2 M
• Binance ended RDNT withdrawals, removing last major exchange listing
• 2024 hack traced to North Korean UNC4736 group, costing $50 M
• Multiple remediation proposals failed, leaving depositors unreimbursed
• Protocol plans dual‑architecture rebuild but lacks runway and liquidity

Pulse Analysis

Radiant Capital rose quickly in 2023, positioning itself as a cross‑chain lender with more than $300 million in user deposits across Arbitrum, Ethereum, Base, and BNB Chain. The protocol’s growth attracted attention, but a sophisticated October 2024 attack—executed through compromised hardware‑wallet signers and a malicious macOS backdoor—allowed a North Korean‑linked group, UNC4736, to drain roughly $50 million. Mandiant’s attribution linked the breach to the DPRK’s Reconnaissance General Bureau, illustrating how nation‑state actors can target decentralized finance platforms with precision.

The fallout has been swift and severe. Radiant’s total value locked collapsed to $2.21 million, and its market capitalization slipped below $2 million, pushing the token out of the top 5,000 listings. Binance, OKX, and Crypto.com have all delisted RDNT, with Binance halting withdrawals on June 1, 2026, effectively removing the last major exchange outlet. Multiple remediation frameworks—fractional‑reserve schemes, merged‑claim contracts, and a Guardian Fund—failed to deliver full reimbursements, leaving depositors largely uncompensated and eroding trust in the protocol’s governance.

Radiant’s demise signals broader challenges for the DeFi ecosystem. State‑backed cyber‑attacks expose vulnerabilities in multisig and hardware‑wallet security, while the lack of a coordinated industry response hampers effective remediation. As regulators and investors scrutinize crypto‑related risk, protocols must prioritize robust security architectures, transparent recovery plans, and diversified liquidity sources. Radiant’s planned dual‑architecture rebuild may offer a technical path forward, but without sufficient capital and user confidence, its chances of regaining relevance remain uncertain.