Realio Network, an RWA tokenization issuance platform, was attacked on August 25 after its hot signing key was stolen, leading to the theft of 127.9 million RIO tokens worth about $6.2 million. The breach affected treasury and custodial wallets tied to realio.fund across Ethereum, BNB Chain, Algorand, Stellar, and Realio’s native chain. GoPlus said the attacker hijacked the platform’s signing stack, allowing direct transfers across multiple chains without user approval, re-keying, or any contract exploit. About $317,000 of the stolen funds has been cashed out so far. The incident stemmed from Realio’s use of a single hot signer to centrally manage treasury, reserves, and user custodial sub-accounts.