Summary
Dexible V2 is a multichain DEX aggregator that suffered a critical smart contract exploit on February 17, 2023, resulting in approximately $2 million in user funds stolen across Ethereum and Arbitrum. The attack exploited an unvalidated router address in the selfSwap function of the v2 contracts, which had never undergone a formal third-party security audit. Stolen funds were laundered through Tornado Cash and have not been recovered; the protocol has since ceased operations.
Connected Entities
1 entities · 10 linked investigationsTimeline(7 events)
2023-02-17
Attacker (0x684083f312ac50f538cc4b634d85a2feafaab77a) exploits selfSwap vulnerability in Dexible V2 contracts, stealing approximately $2 million across Ethereum and Arbitrum from 17 user accounts.
CoinDesk2023-02-17
PeckShield raises public alarm about the exploit on Twitter, approximately five hours before Dexible's official response.
REKT News2023-02-17
Dexible issues official announcement more than nine hours after the exploit began; CEO Michael Coon states contracts have been paused.
CoinTelegraph2023-02-17
Attacker converts stolen TRU tokens to ETH via SushiSwap and routes approximately $1.5 million through Tornado Cash on Ethereum; $450,000 from Arbitrum is bridged to BSC and also laundered via Tornado Cash.
Quadriga Initiative2023-02-20
Dexible team releases post-mortem report acknowledging no formal audit was performed on the v2 contracts and that internal review failed to identify the vulnerability.
REKT News2023-02-20
Security researchers publish technical analyses of the selfSwap arbitrary external call vulnerability, identifying the lack of router address validation as the root cause.
BlockApex2023-12-31
Dexible listed as permanently closed on Crunchbase; no victim compensation program was ever established and stolen funds were not recovered.
CrunchbaseDecision Log
- hash: tKMAYqUkjnTpgTYoTmKoBn4PJ15iRks7Uyg3986EcuH
This investigation is cryptographically anchored to the Solana blockchain and source URLs are archived via the Internet Archive.
model: claude-sonnet-4-6
generated: 5/4/2026, 2:54:44 AM
last updated: 5/28/2026, 4:12:52 PM
avoid.net — verified advice for a post-truth world