GoPlus Security 🚦 (@GoPlusSecurity): 🚨 GoPlus Security Alert:

🚨 GoPlus Security Alert: Aug 25: @realio_network’s realio[.]fund got hit. Attackers seized the platform’s signing stack and swept treasury + custodial wallets across 5 chains. 127.9M $RIO gone ($6.2M). Attacker has cashed out ~$317K so far. Root cause: platform signing keys were taken over. realio[.]fund ran one hot signer for treasury, reserves, and user custody sub-accounts. Once that capability was in hostile hands, they could sign transfers straight out on Ethereum, BNB Chain, Algorand, Stellar, and Realio’s native chain. No user approval. No rekey. No contract bug. A multi-chain RWA issuer put user funds and treasury signing on the same webapp surface. Economically, that keyset is just a cluster of hot wallets.