Skip to main content
AVOID.NET

Tropykus RSK

avoid.net/tropykus-rsk32/100·62% conf.
[AI-DRAFTED · AWAITING VERIFICATION][src:defillama]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·3nJEy6…CS2B

Summary

Tropykus is a DeFi lending and borrowing protocol deployed on the Rootstock (RSK) Bitcoin sidechain, founded in 2021 by a Colombian team targeting Latin American underbanked communities. On June 14, 2023, the protocol suffered an exploit in its rBTC micro-market due to a redeem rounding error and exchange rate manipulation, resulting in losses of approximately $150,000 — roughly 10% of total value locked at the time. The team committed to full reimbursement of affected users and subsequently reverted to Compound Finance's original codebase, but the incident highlighted unresolved smart contract risks in a customized fork.

Connected Entities

4 entities · 60 linked investigations
Organizations
Tropykus RSKPolygon zkEVMZachXBT82
Tokens
Relationships
  • ZachXBTmentioned withBitcoin(65%)
  • Tropykus RSKmentioned withZachXBT(70%)
  • Tropykus RSKmentioned withBitcoin(80%)
  • Tropykus RSKmentioned withPolygon zkEVM(80%)
Have evidence about Tropykus RSK?

Timeline(8 events)

April 2021

Tropykus launches on Rootstock (RSK) testnet.

RootstockLabs Blog

May 2021

Tropykus mainnet deployment on Rootstock goes live, supporting RBTC, DOC, RIF, and USDT markets.

Rootstock Blog

24 May 2023

Tropykus deploys experimental version on Polygon zkEVM, integrating API3 self-funded dAPIs for price oracles.

API3 Medium / Cointelegraph ES

14 June 2023

Tropykus RSK suffers a $150,000 exploit targeting the rBTC micro-market via a redeem rounding error and exchange rate manipulation. Approximately 10% of total deposits are drained.

BeinCrypto ES / Criptotendencias

14 June 2023

Tropykus temporarily disables the platform and identifies two attacker wallet addresses, flagging them across chains.

Criptotendencias

16 June 2023

Tropykus sets a 23:59 GMT-5 deadline for the attacker to contact them before pursuing legal action, referencing the $50,000 Immunefi bug bounty as an alternative.

BeinCrypto ES

July 2023

Tropykus publicly commits to full reimbursement of all user losses; removes the rBTC micro-market and reverts protocol to Compound Finance's original codebase.

Medium — Tropikus Exploit Aftermath Report

18 September 2023

Tropykus Finance closes a venture funding round, raising $700,000 total from Outlier Ventures, Pomp Investments, and RootstockLabs.

Crunchbase / Tracxn
Provenance & Audit Trail

Decision Log

This investigation is cryptographically anchored to the Solana blockchain (3 events). 10 of 15 cited source URLs have an Internet Archive snapshot.

model: claude-sonnet-4-5

generated: 5/4/2026, 2:54:41 AM

last updated: 8/29/2026, 1:35:42 AM

3 views

avoid.net — verified advice for a post-truth world