Post-Incident Review: Aeonix Network
On December 20th, Aeonix Network experienced a security incident involving the unauthorized use of administrative private keys by a project co-founder serving as Chief Technology Officer (CTO). The individual exploited privileged access to sell approximately $40,000 USD worth of ONIX tokens from the protocol’s liquidity pool, resulting in a price decline exceeding 99%.
Following the sale, the proceeds were routed across chains and converted into stablecoins before being deposited into a wallet address previously used to receive the individual’s salary payments.
This review summarizes confirmed facts, evidence, and the project’s current status.
Incident Timeline
• December 20th, 7am UTC
Administrative private keys were used to execute token sales directly from the protocol’s liquidity reserves.
• Immediately following
Approximately $40,000 in value was sold, causing a rapid and sustained price reduction of more than 99%.
• Subsequent transactions
The proceeds, initially received in BNB, were routed through a multichain router.
• Later transactions
BNB was converted to ETH, then to USDC.
• Final transfer
The USDC was deposited into the same wallet address historically used to receive salary payments by the CTO.
• December 21st, 2am UTC
Exploit activity is determined as insider-initiated, beginning incident response procedures.
Attribution and Evidence
The following facts are confirmed and supported by verifiable evidence:
• The transactions originated from an administrator wallet.
• That wallet is operated and controlled by the project’s co-founder and CTO.
• On-chain transaction records demonstrate:
- Liquidity pool token sales
- Cross-chain routing via a multichain router
- Conversion from BNB → ETH → USDC
- Deposit of USDC into a known salary payment address
• No external smart contract vulnerability or third-party exploit was used.
Operational Impact
The co-founder and CTO operated the project’s backend infrastructure and servers. As a result:
• Core product functionality is currently offline
• Backend services and servers remain inaccessible
• Normal protocol operations cannot resume until control and access issues are fully resolved
Market Risk and Trading Warning
At the time of writing:
• The individual continues to hold tokens in the wallet used during the incident
• Additional selling from this wallet could result in further losses
Users are strongly advised not to trade the ONIX token until a resolution is reached.
Incident Response and Law Enforcement
Following confirmation of the incident:
• The individual’s access was revoked where technically possible
• Contracts and systems were secured to the extent feasible
• All relevant evidence was preserved, including transaction data and internal records
• A formal police report is being filed, providing authorities with supporting documentation
Path Forward and Resolution Options
The team is actively exploring options to:
• Recover or mitigate losses where possible
• Restructure or relaunch the ONIX token
• Rebuild backend infrastructure under new controls
Details will be shared only once plans are concrete and verifiable.
Conclusion
This incident was not the result of an external exploit or unknown vulnerability, but of insider misuse of administrative private keys. The facts presented are supported by on-chain evidence and internal records.
We recognize the severity of this incident and the real financial and emotional impact it has on our community, partners, and users. The unauthorized actions described above caused significant losses, operational disruption, and a profound erosion of trust.
Further updates, including on-chain evidence, will be shared as material developments occur. Until then, our focus remains on safeguarding users, supporting the investigative process, and working toward a responsible path forward.
We've scheduled our end of month AMA with @aeonix_network to discover more about what they’ve been building on cheqd.
🤖 Verifiable AI
🪪 Aeonix ID
📑 Decentralised Model Training
🌍 Aeonix Explorer
📅 30 Oct
🕓 1500 UTC
Set a reminder 👇
https://t.co/a3XGYQZ3PX
We've scheduled our end of month AMA with @aeonix_network to discover more about what they’ve been building on cheqd.
🤖 Verifiable AI
🪪 Aeonix ID
📑 Decentralised Model Training
🌍 Aeonix Explorer
📅 30 Oct
🕓 1500 UTC
Set a reminder 👇
https://t.co/a3XGYQZ3PX
We’ll be hosting an AMA with @aeonix_network to discover more about what they’ve been building using our infrastructure.
🤖 Verifiable AI
🪪 Aeonix ID
📑 Decentralised Model Training
🌍 Aeonix Explorer
📅 16 Oct
🕓 1500 UTC
Set a reminder 👇
https://t.co/xRgWWM4nJg
Introducing Onix, your web3 assistant.
Browse blockchain data and interact with decentralized applications using simple natural language.
Verified Aeonix ID accounts can launch the demo at:
https://t.co/2madREMB1Z
The Aeonix Explorer is a natural language web3 browser.
Deploy multiple AI agents through a single prompt across knowledge bases, blockchain explorers, internet data, and connected APIs.
Simple. Private. Verifiable.
Use Case - Lead Generation
Aeonix AI supports a customizable chatbot for lead processing, automating the customer profile creation and CRM actions.
Add 24/7 consistent and controllable brand experiences to your business with Aeonix AI.
All verified Aeonix ID accounts have been whitelisted to test the upcoming Aeonix Explorer browser agent, Onix.
Testers will receive a dashboard notification next week for access.
Today marks six months since aeonix launched.
We've compiled a review of the most significant achievements and milestones during this window:
https://t.co/OJr72xJuqb
Introducing the explorer dashboard, a modular smart container for aeonix ecosystem information and applications.
Future updates will add new widgets, data, and personalization.
View the dashboard:
https://t.co/6dqXUp5nPb
✅️ Verifiable AI
🤖 Agentic Economies
🔗 Trust Infrastructure
🧩 Game Theory
⚖️ Liquidity Optimization
Take a deep dive into aeonix and learn how $ONIX powers a sustainable ecosystem through aligned incentives.
Want to learn more about how aeonix establishes Verifiable Provenance with SSI infrastructure?
Review our hackathon entry here:
https://t.co/oSioEPP178
Read the report from $CHEQ & Sprite+:
https://t.co/quyRt2nvUm
Exciting to see our approach to Trustworthy AI Agents recognized in a recent report from $CHEQ and Sprite+
Verifiable Provenance creates origin to output AI Agent transparency, showing both why the result appeared and whether it can be trusted.
We're thrilled to announce aeonix has joined the @DAIAAlliance, an international consortium dedicated toward advancing standards within Decentralized AI Agents.
Read more here:
https://t.co/wEOldC0wxn