Radix Week in Review: The DEX Pool Drain

Week in brief

• On 14 November one account took about 1.32m $XRD out of decentralized-exchange pools in 29,524 transactions, then bridged it to Base.
• It used a known flaw in first-version Ociswap Flex Pools, and a rounding error in Radix's native two-token pool that only a protocol update can change.
• RDX transferred 1.4bn $XRD to Gary on 9 November under an over-the-counter sale; on 14 November he moved 22m of it to MEXC to provide liquidity.
• Candidacy for the Permanent RAC closed on 13 November with 15 candidates.
• The Transition RAC voted to buy the Foundation company that holds the Radix Wallet's app-store listings, for £1.
• RadixDAO put its own token price service for the Radix Wallet into production on 12 November.
• hyperscale-rs took 20 commits, on how a node treats consensus certificates across epochs and halts.

On Saturday 14 November one Radix account drained decentralized-exchange pools for nine hours and left with about 1.32m $XRD. By the evening linuxx, a community developer, said he had written patches and that the Radix Foundation would have to deploy them, because one of the two flaws sits in code built into the network and can only be changed by the people who ship its protocol updates.

Those people are changing. In the same week RDX Works' remaining $XRD changed hands, candidacy for the council that will oversee the DAO closed, and the DAO took over two things the wallet depends on: its app-store publisher and its price service.

The 14 November pool drain

The account was funded with 2,637 $XRD at 01:24 UTC and made its last transaction at 10:35, 29,524 transactions later (Radix DEX Pool Drain). minhnn_mvn, a member of the main Radix Telegram, reported it at 09:45 UTC, and the same warning went up in the Ociswap group a minute later.

The Flex Pools

The first version of Ociswap's Flex Pool lends tokens by flash loan out of the same vault it prices swaps from, which is how one pool lost 1.14m $XRD on 27 October. Ociswap asked liquidity providers to withdraw then. Fourteen pools still held $XRD, and between 08:41 and 09:33 UTC the account emptied them for 1.16m. The largest, RBX/XRD, lost 287k $XRD in one transaction: a swap in, a flash loan that nearly empties the token vault, a swap back priced against the emptied vault, and the repayment.

The rounding in the native pool

Radix's native TwoResourcePool, a pool component built into the Radix Engine, issues pool units for a deposit before it takes the tokens, and then rounds each token down to the smallest unit it allows (source). Pool units are the tokens that redeem a share of the pool. For wrapped bitcoin, which divides to eight places, a deposit can be credited with up to one satoshi it never paid. CaviarNine's simple pools and DeFiPlaza keep their liquidity in it. The account deposited 16 to 23 times per transaction and redeemed once, 10 to 20 satoshis up each time, and sold what it gathered for 466k $XRD after paying 183k in fees.

The version the Anemone protocol update replaced rounded first. The native MultiResourcePool works out its pool units in the same order; the single-token pool keeps the whole deposit and has no gap (Radix Pools). The flaw pays only where a token's smallest unit is worth more than a network fee, which on Radix today means bitcoin.

Who fixes it

Between 10:09 and 10:11 UTC the account sent 1,315,856 $XRD and 58.62 hUSDC to Base over Hyperlane, the bridge that carried the proceeds of the October exploit and the August drain. linuxx said in the main chat that both affected pool types fail on a rounding error, that he had sent a DeFiPlaza patch as well, and that deploying them has to come from the Foundation. A change to a native blueprint ships only in a protocol update, which validators install and signal for. By Sunday none of Ociswap, CaviarNine or DeFiPlaza had posted a statement in its group.

RDX's tokens change hands

Gary, a community member, had announced on 6 November that he and RDX had signed an over-the-counter agreement for the $XRD the group still held. On 9 November RDX withdrew exactly 1.4bn $XRD and deposited it in Gary's account in five transfers of 280m. Neither side has published the price. The RDX Works page lists the accounts on both sides.

On 14 November Gary said he was splitting the funds over seven accounts and that one of them had sent 22m $XRD to MEXC, to sit paired against USDT, matched with stablecoins from Ethereum, and keep the exchange's market healthy. MEXC holds the largest $XRD order book, and the US Treasury's FinCEN has ordered US financial institutions to stop transfers with it from 10 December (Federal Register, How to Buy $XRD). The same evening he asked operators of validators with less than 120m $XRD staked to reply if they need stake.

RDX Works' own case comes to the High Court on 18 November, when HM Revenue & Customs asks for the company to be wound up (The London Gazette).

The handover

Fifteen candidates

Candidacy for the Permanent RAC, the council that will oversee Radix DAO LLC's governance, closed on 13 November. Fourteen people replied in the RadixTalk topic, six of them in the last two days, and CryptoBright stood in a topic of its own. The election uses Majority Judgment, in which voters grade every candidate rather than choosing one (Elect the Permanent RAC). projectShift, who opened the topic for the council, said on 15 November that candidates are still being checked and that the vote will open in November.

The wallet's publisher and its prices

The Radix Wallet is published in the Apple and Google stores by Radix Publishing (UK) Limited, a dormant Foundation company. At its 7 November meeting the Transition RAC voted 3 to 0 to buy the company for £1, so the apps keep their publisher, and named Tadkis its director (minutes, published 10 November). The asset-transfer card tracks the rest of the handover, whose tokens still wait on a custody proposal.

On 12 November RadixDAO put a token price service into production at prices.radixdao.org, the service that gives the Radix Wallet its dollar values (RadixDAO/pricing-service). It runs on Cloudflare's free tier, built from linuxx's radix-price-minimal. It publishes the $XRD price only when two sources agree, at least one of them off-chain, and prices stablecoins from their pools instead of at a dollar; a developer in the channel noted that the old service had not caught hUSDC falling as low as 10 cents. The wallet still points at the old service by default; each user can add the new address in its settings.

Hyperscale: certificates across halts

hyperscale-rs, flightofthefox's sharded Radix node, took 20 commits on 9 and 10 November and merged PR #185, a refactor of the node crates. Most of the commits change how a node judges a quorum certificate, the signed proof that validators agreed on a block: by the epoch it was signed in rather than by a clock, with one gate that refuses certificates from a halted epoch, and with a floor for a node restarting from saved state. Asked for highlights on 13 November, flightofthefox answered that he is working through the specification.

The week on the ledger

Read live from the Radix Gateway at epoch 358,624, state version 569,651,387, on 2026-11-15.

The ledger

• Hit: twelve or more candidates when Permanent RAC candidacy closes on 13 November. Fourteen distinct accounts had replied in the RadixTalk topic by the end of 13 November, read on 15 November.
• Still open: six or fewer validators hold a third of active stake by 22 November. This week's reading is 8, further from it.
• New: the High Court makes a winding-up order against RDX Works at or after the 18 November hearing. Due 2 December; settled by the company's filing history at Companies House.
• New: voting for the Permanent RAC opens by 30 November, as projectShift said. Due 1 December; settled by an open ballot announced in the RAC channel or on radixdao.org.

Every claim and its evidence: the Week in Review index.

This week on the wiki

The Radix DEX Pool Drain page walks through one transaction of each kind, call by call, and gives the source lines for the rounding. A liquidity provider can read from it which pools are exposed: those built on the native two-token and multi-token pools that hold a token whose smallest unit is worth more than a network fee.

Pages edited in the seven days to 2026-11-15:

Concentration watch

8 validators hold a third of the active set's stake, one more than last week, against the one-third line a group would need to stall the network. Stake rose 351m to 4.59bn, which lifts that line by 117m; the seven largest hold 1.41bn and now fall short of it. A second read through radixscan at epoch 358,625 gives the same 8. The fee check found 85 validators charging a fee other than the one stored on the ledger, as last week, and no fee change queued. The table is on the network page.

What to watch

• 18 November: the High Court hears HMRC's petition to wind up RDX Works. RDX Works' filing history at Companies House shows any order.
• The Permanent RAC vote, which projectShift expects in November. The RAC channel will announce the ballot.
• A fix for the native pool rounding. It needs a protocol update, so the check is a named update in radixdlt-scrypto and a statement from CaviarNine or DeFiPlaza.

Corrections

Nothing this week.

Next week the court hears the RDX Works petition, and the council expects to open the Permanent RAC vote.

Radix Week in Review series, Issue #21: ← Previous: Issue #20, Nov 2–8, 2026 · All recaps · Subscribe

Previously: The recovered hUSDC reached 79 accounts, developers measured what a node and Gateway need, and hyperscale-rs named three workstreams.