← Rubic1 decision on this page
Audit log
Every state-changing event for Rubic: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions carry three independent witnesses — the original source, an Internet Archive snapshot taken at submission time, and a Solana memo signed by our publicly-disclosed publisher key.
- #1publishby system:backfill2026-05-28 03:34:43ZScore: ? → ? (no score change)anchoranchored
- chain
- ●mainnet-betaslot 422,639,372
- sig
3YsZ3TtNmgxm…fdAkzZKxexplorer ↗- hash
9Gmfm28ZNKA6…svosKgN6sha256 → base58
verifying row…full verify ↗canonical bytes (5063 B) ▸
{"actor":"system:backfill","investigation_id":"88f93946-9f2c-4759-9f76-2b60c05315a3","kind":"publish","page_slug":"rubic","published_at":"2026-05-28T03:34:43.595Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Rubic","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.coindesk.com/tech/2022/11/02/cross-chain-dex-rubic-loses-over-1m-in-funds-after-hackers-gain-access-to-private-keys","type":"other","url":""},{"credibility":3,"name":"https://www.web3isgoinggreat.com/?id=rubic-exchange-private-key-compromised-token-plummets","type":"other","url":""},{"credibility":3,"name":"https://cryptonews.com/news/decentralized-exchange-rubic-loses-1000000-exploit-involving-private-keys/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://quillaudits.medium.com/decoding-rubic-exchange-exploit-quillaudits-44828e71c417","type":"other","url":""},{"credibility":3,"name":"https://www.web3isgoinggreat.com/?id=rubic-cross-chain-exchange-hacked","type":"other","url":""},{"credibility":3,"name":"https://crypto.news/rubic-dex-aggregator-hack-leads-to-1-4m-of-user-funds-stolen/","type":"other","url":""},{"credibility":3,"name":"https://coincodecap.com/the-cross-chain-aggregator-rubic-has-been-exploited-for-nearly-1-4-million","type":"other","url":""},{"credibility":3,"name":"https://revoke.cash/exploits/rubic","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://rubic.exchange/blog/rubics-new-security-architecture/","type":"other","url":""},{"credibility":3,"name":"https://docs.rubic.finance/rubic/security","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.merklescience.com/blog/the-dfintoch-scam-origins-and-operations","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://tokeninsight.com/en/coins/rubic/team","type":"other","url":""},{"credibility":3,"name":"https://coinmarketcap.com/currencies/rubic/","type":"other","url":""},{"credibility":3,"name":"https://messari.io/report/understanding-rubic","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://rubic.exchange/blog/rubics-2024-yearly-report/","type":"other","url":""},{"credibility":3,"name":"https://messari.io/report/rubic-q4-2024-brief","type":"other","url":""},{"credibility":3,"name":"https://messari.io/report/rubic-q1-2025-brief","type":"other","url":""}]}],"sources_used":[],"summary":"Rubic is a cross-chain DEX aggregator founded in 2020 by Vladimir Tikhomirov and Alexandra Korneva, supporting swaps across 90+ blockchains. The protocol suffered two significant security incidents within two months in late 2022: a private key compromise in November that drained approximately $1.2 million in RBC tokens, followed by a smart contract exploit on December 25, 2022 that stole roughly $1.4 million in user USDC. Both events caused severe token price collapses, though the platform subsequently implemented new security architecture and remained operational into 2025.","timeline":[{"date":"2017-01-01","event":"Founders Vladimir Tikhomirov and Alexandra Korneva launch MyWish, a smart contract platform, establishing the team's crypto background.","source":""},{"date":"2020-01-01","event":"Rubic project founded; team raises approximately $500,000 (1,800 ETH) in initial funding.","source":""},{"date":"2022-11-02","event":"Admin wallet private key compromised; attacker drains approximately 34 million RBC/BRBC tokens worth ~$1.2 million and sells on Uniswap and PancakeSwap. RBC price collapses over 98%.","source":""},{"date":"2022-12-25","event":"Smart contract exploit: attacker exploits USDC miswhitelisting and lack of input validation in routerCallNative to steal ~$1.4 million in USDC from 49 users. Funds laundered through Tornado Cash.","source":""},{"date":"2022-12-25","event":"Rubic pauses all contracts and advises users to revoke approvals via revoke.cash.","source":""},{"date":"2022-12-29","event":"Rubic publishes post-hack weekly report, announces compensation plan capped at $5,000 per affected user funded from founder personal savings.","source":""},{"date":"2023-04-03","event":"Rubic relaunches with new security architecture: MixBytes-audited contracts, Gnosis Safe multisig, new CISO hired, Immunefi bug bounty program launched.","source":""},{"date":"2023-05-01","event":"DFintoch collapse ($31.6M exit scam) investigated by ZachXBT; Merkle Science notes swap contracts used for DFintoch laundering were also associated with Rubic exploit proceeds.","source":""},{"date":"2024-12-31","event":"Rubic reports 2024 full-year metrics: 828K+ transactions, $391.5M volume, 369K+ wallets.","source":""},{"date":"2025-03-31","event":"Rubic reports Q1 2025 record: $433 million in transaction volume across 93 supported blockchains.","source":""}]},"v":1}Verify offline (run on your own machine)python -m src.verify_decision f0bf3c49-b91c-4caa-bed2-7425272ce5e3
How verification works. The “Row integrity” check above is computed in your browser — your machine recomputes the SHA-256 of the canonical bytes and compares against the stored hash. No avoid.net server can fake that check. The “full verify” link goes one level deeper: your browser fetches the on-chain transaction from a Solana RPC node and confirms the same hash is in the memo. If you don’t want to trust either avoid.net or the public RPC, run the CLI verifier on your own machine —
python -m src.verify_decision <event_id>.