Dexible V2
Last changed 2026-10-10 · Score recalculated — Rescored under Scoring v2, the published formula (avoid.net/scoring): 18 → 42. Problems weighed by who is responsible: incidents the subject suffered −20, concerns that are not fraud −12, problems around the subject, caused by others −0.8; the penalty for incidents it suffered is capped at 20. Version history →
Why this score
| Every page starts at | 65 |
| Concerns that are not fraud | -12 |
| Incidents it suffered (e.g. hacks) | -20 |
| Problems around it, caused by others | -0.8 |
| Sum | 32 |
- The penalty for incidents it suffered is capped at 20 points.
Score: 42/100 (kept between 0 and 100)
How scoring works →Summary
Dexible V2 is a multichain DEX aggregator that suffered a critical smart contract exploit on February 17, 2023, resulting in approximately $2 million in user funds stolen across Ethereum and Arbitrum. The attack exploited an unvalidated router address in the selfSwap function of the v2 contracts, which had never undergone a formal third-party security audit. Stolen funds were laundered through Tornado Cash and have not been recovered; the protocol has since ceased operations.
Connected Entities
7 entities · 60 linked investigations- Fantom (Sonic Labs)→mentioned with→Binance(60%)
- Binance→mentioned with→Ethereum(65%)
- Dexible V2→mentioned with→Arbitrum(70%)
- Dexible V2→mentioned with→Binance(60%)
- Dexible V2→mentioned with→Ethereum(80%)
- Dexible V2→mentioned with→SushiSwap(65%)
- Dexible V2→mentioned with→Polygon(60%)
- SushiSwap→mentioned with→Arbitrum(65%)
- SushiSwap→mentioned with→Ethereum(60%)
- SushiSwap→mentioned with→Polygon(65%)
- + 6 more
Connected Through
6 shared actors · 634 investigationsDistinct actors this investigation shares with others — holders, traders, and named parties. Shared infrastructure (exchanges, pools) is excluded.
- □Ethereumorganization
- □Binanceorganization
- □Arbitrumorganization
- □Polygonorganization
Timeline(7 events)
17 February 2023
Attacker (0x684083f312ac50f538cc4b634d85a2feafaab77a) exploits selfSwap vulnerability in Dexible V2 contracts, stealing approximately $2 million across Ethereum and Arbitrum from 17 user accounts.
CoinDesk17 February 2023
PeckShield raises public alarm about the exploit on Twitter, approximately five hours before Dexible's official response.
REKT News17 February 2023
Dexible issues official announcement more than nine hours after the exploit began; CEO Michael Coon states contracts have been paused.
CoinTelegraph17 February 2023
Attacker converts stolen TRU tokens to ETH via SushiSwap and routes approximately $1.5 million through Tornado Cash on Ethereum; $450,000 from Arbitrum is bridged to BSC and also laundered via Tornado Cash.
Quadriga Initiative20 February 2023
Dexible team releases post-mortem report acknowledging no formal audit was performed on the v2 contracts and that internal review failed to identify the vulnerability.
REKT News20 February 2023
Security researchers publish technical analyses of the selfSwap arbitrary external call vulnerability, identifying the lack of router address validation as the root cause.
BlockApex31 December 2023
Dexible listed as permanently closed on Crunchbase; no victim compensation program was ever established and stolen funds were not recovered.
CrunchbaseDecision Log
- slot 455358802 · hash 58zpGvywYj5FRisVw9mH3fPK9gAddghxz776Z7VcAhfZ
- slot 422754265 · hash tKMAYqUkjnTpgTYoTmKoBn4PJ15iRks7Uyg3986EcuH
This investigation is cryptographically anchored to the Solana blockchain (2 decisions). 9 of 10 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 5/4/2026, 2:54:44 AM
last updated: 10/10/2026, 6:40:23 PM
4 viewsavoid.net — verified advice for a post-truth world