{"investigation":{"slug":"rivus-dao","entity_name":"Rivus DAO","trust_score":8,"severity_base":null,"score_modifier":0,"confidence":0.72,"status":"published","content_type":"investigation","summary":"Rivus DAO was a Bittensor-focused liquid staking protocol on Ethereum that raised approximately $4.23 million in an April 2024 IDO before suffering a rugpull classified by DefiLlama as a Third-party Dev Backdoor Exploit on September 16, 2024. The incident effectively drained protocol TVL from its operational peak to under $2,500, and the RIVUS governance token lost more than 99.8% of its all-time high value. On-chain investigator ZachXBT has flagged this entity; the project attempted a relaunch in October 2024 but is currently listed as inactive with no trading activity.","sections":[{"content":"Rivus DAO described itself as a decentralized autonomous organization delivering liquid staking derivative (LSD) services to AI-focused blockchain networks, primarily Bittensor (TAO). Its flagship product, rsTAO, was an ERC-20 liquid staking token on Ethereum allowing users to stake Bittensor's native TAO token and receive transferable yield-bearing receipts. The protocol also offered rsCOMAI and rsNMT derivatives for the CommuneAI and Nimble network ecosystems. RIVUS functioned as the governance token. The RIVUS token contract is deployed on Ethereum at 0x60e254e35dd712394b3aba7a1d19114732e143dd.","heading":"Overview and Background","sources":[{"url":"https://docs.rivusdao.xyz","name":"docs.rivusdao.xyz","type":"other","credibility":3},{"url":"https://defillama.com/protocol/rivus-dao","name":"defillama.com","type":"other","credibility":3},{"url":"https://etherscan.io/token/0x60e254e35dd712394b3aba7a1d19114732e143dd","name":"etherscan.io","type":"other","credibility":3}],"severity":"medium"},{"content":"The RIVUS token was offered via a Liquidity Bootstrapping Pool on Fjord Foundry from April 2–5, 2024, raising approximately $4.23 million at a closing IDO price of roughly $0.0426 per token. The token launched on April 9, 2024, and listed on Poloniex on April 10, 2024. RIVUS reached its all-time high of approximately $0.1049–$0.1284 on April 12, 2024, representing a brief 3x return from IDO price and an implied FDV of approximately $57 million at peak. Total token supply is 1,000,000,000 RIVUS. The project had no published independent smart contract security audit at launch.","heading":"Token Launch and Fundraising","sources":[{"url":"https://www.coinlive.com/en/news-flash/483785","name":"coinlive.com","type":"other","credibility":3},{"url":"https://www.coincarp.com/currencies/rivusdao/project-info/","name":"coincarp.com","type":"other","credibility":3},{"url":"https://cryptorank.io/price/rivusdao","name":"cryptorank.io","type":"other","credibility":3}],"severity":"medium"},{"content":"DefiLlama classifies Rivus DAO as a rugpull with the incident technique identified as a 'Third-party Dev Backdoor Exploit' dated September 16, 2024. This classification indicates malicious code was introduced into the protocol's smart contracts by a developer, enabling the draining of user funds without triggering standard access controls. Following the incident, the protocol's TVL collapsed to approximately $2,207, consistent with near-total loss of deposited assets. The RIVUS token depreciated to an all-time low of approximately $0.00001, a decline of approximately 99.9% from the all-time high.","heading":"Rugpull Incident — September 16, 2024","sources":[{"url":"https://defillama.com/protocol/rivus-dao","name":"defillama.com","type":"other","credibility":3},{"url":"https://www.coingecko.com/en/coins/rivusdao","name":"coingecko.com","type":"other","credibility":3}],"severity":"medium"},{"content":"On-chain investigator ZachXBT has flagged Rivus DAO as a high-risk entity. The specific published findings have not been independently confirmed through a publicly accessible report at the time of this investigation. The flagging is treated as a meaningful risk signal given ZachXBT's documented track record. CertiK Skynet assigned RivusDAO a security score of 65.94 (BB rating), noting the absence of any audit, no bug bounty program, and no team KYC verification.","heading":"ZachXBT Flag and Community Warnings","sources":[{"url":"https://skynet.certik.com/projects/rivusdao","name":"skynet.certik.com","type":"other","credibility":3},{"url":"https://newsletter.blockthreat.io/p/blockthreat-week-38-2024","name":"newsletter.blockthreat.io","type":"other","credibility":3}],"severity":"medium"},{"content":"On approximately September 24, 2024, the official Rivus DAO X account announced a protocol relaunch set for October 1, 2024, framing it around a 'secure' V2 platform. As of May 2026, CryptoRank lists RivusDAO as Inactive with no current trading price. CoinGecko reports the token stopped trading approximately late April 2026. Etherscan shows 1,765 token holders with zero 24-hour trading volume. The protocol's website (rivusdao.xyz) returns a 404 error. The relaunch did not result in any meaningful recovery of TVL or token price.","heading":"Relaunch Attempt and Current Status","sources":[{"url":"https://cryptorank.io/price/rivusdao","name":"cryptorank.io","type":"other","credibility":3},{"url":"https://www.coingecko.com/en/coins/rivusdao","name":"coingecko.com","type":"other","credibility":3},{"url":"https://etherscan.io/token/0x60e254e35dd712394b3aba7a1d19114732e143dd","name":"etherscan.io","type":"other","credibility":3}],"severity":"medium"},{"content":"Rivus DAO launched and operated without a published independent security audit from any major firm. CertiK Skynet confirms 'Not Audited By CertiK' with no third-party audit on record and no bug bounty program. The DefiLlama rugpull classification of 'Third-party Dev Backdoor Exploit' implies a code-level attack vector rather than market manipulation, reinforcing the significance of the missing audit. The absence of audits combined with an anonymous team and the confirmed exit represents a textbook high-risk DeFi profile.","heading":"Security and Audit Posture","sources":[{"url":"https://skynet.certik.com/projects/rivusdao","name":"skynet.certik.com","type":"other","credibility":3},{"url":"https://defillama.com/protocol/rivus-dao","name":"defillama.com","type":"other","credibility":3}],"severity":"medium"},{"content":"The identities of the Rivus DAO founding team were not publicly confirmed through any verifiable source. Project documentation did not name individual contributors, and no LinkedIn profiles or prior project histories were referenced in official materials. CertiK Skynet confirms no team KYC verification was conducted. An anonymous or pseudonymous team structure, combined with the absence of audits and the confirmed rugpull classification, represents a significant transparency deficit consistent with exit scam patterns observed across prior DeFi incidents.","heading":"Team Identity and Transparency","sources":[{"url":"https://skynet.certik.com/projects/rivusdao","name":"skynet.certik.com","type":"other","credibility":3},{"url":"https://docs.rivusdao.xyz","name":"docs.rivusdao.xyz","type":"other","credibility":3}],"severity":"medium"}],"timeline":[{"date":"2024-04-02","event":"RIVUS token IDO begins on Fjord Foundry LBP, raising ~$4.23M at ~$0.0426/token.","source":""},{"date":"2024-04-09","event":"RIVUS token officially launches on-chain.","source":""},{"date":"2024-04-12","event":"RIVUS reaches all-time high of ~$0.1049–$0.1284, implying ~$57M FDV.","source":""},{"date":"2024-09-16","event":"DefiLlama records rugpull via Third-party Dev Backdoor Exploit. TVL collapses to ~$2,207.","source":""},{"date":"2024-09-24","event":"Official Rivus DAO X account announces V2 relaunch planned for October 1, 2024.","source":""},{"date":"2026-04-28","event":"RIVUS stops trading on all CoinGecko-listed exchanges. Website returns 404.","source":""}],"sources_used":[{"url":"https://docs.rivusdao.xyz","name":"docs.rivusdao.xyz","type":"other","archive_url":"http://web.archive.org/web/20260612231911/https://docs.rivusdao.xyz/","credibility":3,"archive_timestamp":"2026-06-12T23:19:11+00:00"},{"url":"https://defillama.com/protocol/rivus-dao","name":"defillama.com","type":"other","archive_url":"http://web.archive.org/web/20250910023554/https://defillama.com/protocol/rivus-dao","credibility":3,"archive_timestamp":"2025-09-10T02:35:54+00:00"},{"url":"https://etherscan.io/token/0x60e254e35dd712394b3aba7a1d19114732e143dd","name":"etherscan.io","type":"other","archive_url":"http://web.archive.org/web/20250918054745/https://etherscan.io/token/0x60e254e35dd712394b3aba7a1d19114732e143dd","credibility":3,"archive_timestamp":"2025-09-18T05:47:45+00:00"},{"url":"https://www.coinlive.com/en/news-flash/483785","name":"coinlive.com","type":"other","archive_url":"https://web.archive.org/web/20260830004646/https://www.coinlive.com/en/news-flash/483785","credibility":3,"archive_timestamp":"2026-08-30T00:46:46+00:00"},{"url":"https://www.coincarp.com/currencies/rivusdao/project-info/","name":"coincarp.com","type":"other","archive_url":"https://web.archive.org/web/20260830003854/https://www.coincarp.com/currencies/rivusdao/project-info/","credibility":3,"archive_timestamp":"2026-08-30T00:38:54+00:00"},{"url":"https://cryptorank.io/price/rivusdao","name":"cryptorank.io","type":"other","archive_url":"https://web.archive.org/web/20260830042202/https://cryptorank.io/price/rivusdao","credibility":3,"archive_timestamp":"2026-08-30T04:22:02+00:00"},{"url":"https://www.coingecko.com/en/coins/rivusdao","name":"coingecko.com","type":"other","archive_url":null,"credibility":3,"archive_timestamp":null},{"url":"https://skynet.certik.com/projects/rivusdao","name":"skynet.certik.com","type":"other","archive_url":"https://web.archive.org/web/20260829141516/https://skynet.certik.com/projects/rivusdao","credibility":3,"archive_timestamp":"2026-08-29T14:15:16+00:00"},{"url":"https://newsletter.blockthreat.io/p/blockthreat-week-38-2024","name":"newsletter.blockthreat.io","type":"other","archive_url":"http://web.archive.org/web/20251214002832/https://newsletter.blockthreat.io/p/blockthreat-week-38-2024","credibility":3,"archive_timestamp":"2025-12-14T00:28:32+00:00"}],"source_tags":["defillama"],"addresses":[],"reviewed":false,"reviewed_by":null,"model_used":"claude-sonnet-4-5","created_at":"2026-05-04T02:54:29.305752+00:00","updated_at":"2026-08-30T05:14:06.427868+00:00"}}