Realio Network Suspends Webapp and Chain After Theft of 124 Million RIO Tokens
Realio Network, a Layer-1 platform focused on tokenizing real-world assets, has taken significant measures following a security breach that drained around 124.4 million RIO tokens from its wallets and user accounts. On August 25, the platform shut down its web application and halted its native blockchain at 10:38 UTC, as directed by the lead developer during an ongoing investigation. This suspension left users unable to access their funds while the team works on recovery efforts.
The breach specifically targeted the signing capabilities of platform-controlled wallets associated with the realio.fund interface. The attacker exploited this vulnerability to transfer stolen assets across five different networks: Ethereum, BNB Chain, Algorand, Stellar, and the Realio native chain.
According to analysis from realiostats.com, the majority of the stolen tokens, approximately 113.7 million RIO, were taken from treasury and reserve holdings that were not included in circulating supply figures. Additionally, around 10.7 million RIO was withdrawn from user accounts, which accounted for about 3.3% of the previously circulating supply. Notably, around 5.73 million RIO was extracted from 2,374 individual user accounts before the chain halt prevented further withdrawals.
Following the breach, over 2.5 million RIO was reportedly sold through trades on the Stellar decentralized exchange, with some transactions continuing even after the breach was made public. In response to community alerts, major exchanges MEXC and KuCoin suspended RIO deposits on Algorand.
Realio Network is not a typical decentralized finance (DeFi) protocol; it aims to facilitate the tokenization of real-world assets such as private equity and real estate. The incident highlights a critical vulnerability in platforms that serve both custodial and non-custodial users under a single interface. Users who believed they had non-custodial control discovered that the platform's signing infrastructure was a shared vulnerability.
The immediate concern for token holders revolves around liquidity, as the suspension of the native chain and web application, along with the halting of deposits by two major exchanges, significantly narrowed the market for RIO tokens. Looking ahead, the Realio team faces the challenge of addressing restitution for the affected users whose holdings were compromised. While the team has stated that it is actively investigating and working towards recovery, details regarding compensation or a token management plan had not been disclosed at the time of the chain halt.
