GoPlus: Realio was hacked on August 25, losing approximately $6.2 million worth of RIO tokens.

Per GoPlus monitoring, Realio Network — a RWA tokenization issuance and management platform — was hacked on August 25. The attacker hijacked the platform’s signature stack and siphoned funds from treasury and custodian wallets across five blockchains: Ethereum, BNB Chain, Algorand, Stellar, and Realio’s native chain. A total of 127.9 million RIO tokens were stolen, worth roughly $6.2 million, with the attacker having cashed out around $317,000 to date. GoPlus Security’s analysis attributes the incident to the theft of the platform’s signing keys. Realio[.]fund previously used a single hot signer to uniformly manage the treasury, reserves, and user custodian sub-accounts. After gaining this access, the attacker could directly sign transfers across multiple chains without user approval, key reconfiguration, or any contract vulnerability being exploited. Realio’s official team stated the platform has suspended access, with all user wallet fund deposits and withdrawals fully halted. The team is developing a recovery plan, verifying incident details, and will cooperate with law enforcement to identify the attacker’s identity.