A Radix Engine execution-layer flaw allowed transactions to obtain direct references to arbitrary internal fungible and non-fungible vaults without verifying that the caller owned or was authorized to access them. The attacker supplied internal vault addresses to custom code and directly invoked withdrawal functionality, bypassing the authorization rules of the accounts and components holding those vaults. Across 26 transactions, the attacker drained nearly the entire Radix supply of six Hyperlane-wrapped assets and then used their normal Hyperlane Warp Routes to bridge the stolen assets out of Radix