BlockBeats News, August 27th, according to GoPlus monitoring, the RWA tokenization issuance and management platform Realio Network was attacked on August 25th. The attacker hijacked the platform's signature stack and looted the treasury wallets and custody wallets on five chains, including Ethereum, BNB Chain, Algorand, Stellar, and the Realio native chain. A total of 127.9 million RIO was stolen, valued at approximately $6.2 million. The attacker has currently cashed out about $317,000.

GoPlus Security analysis stated that the root cause of the incident was the theft of the platform's signature key. Previously, realio[.]fund used a single hot signer to uniformly manage the treasury, reserves, and user custody subaccounts. After obtaining this permission, the attacker could directly sign transfers on multiple chains, without requiring user approval, key reconfiguration, or involving any contract vulnerabilities.

Realio officials stated that the platform has suspended access, and all user wallet fund transfers have been halted. The team is developing a recovery plan, verifying the details of the incident, and will cooperate with law enforcement to identify the attacker.