Verify a decision

{"actor":"system:backfill","investigation_id":"c1e4e929-48a2-4614-8908-a90fa95f9fd6","kind":"publish","page_slug":"tmx-tribe","published_at":"2026-05-27T19:45:41.333Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"TMX TRIBE","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://x.com/TMXTribe/status/1920163256846479553","type":"other","url":""},{"credibility":3,"name":"https://www.globenewswire.com/news-release/2025/05/26/3088231/0/en/TRIBE-DEX-Brings-Real-DeFi-Utility-to-Life-with-TMX-TGE-Only-485-ETH-Available-After-871K-Raised.html","type":"other","url":""},{"credibility":3,"name":"https://www.weex.com/learn/articles/what-is-tribe-perpetual-tmx-coin-a-comprehensive-guide-983","type":"other","url":""},{"credibility":3,"name":"https://coinmarketcap.com/currencies/tmx/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://rekt.news/tmztribe-rekt","type":"other","url":""},{"credibility":3,"name":"https://nulltx.com/certik-flags-1-4m-exploit-linked-to-tmx-tribe-on-arbitrum/","type":"other","url":""},{"credibility":3,"name":"https://bitcoinethereumnews.com/finance/certik-flags-1-4m-exploit-linked-to-tmx-tribe-on-arbitrum/","type":"other","url":""},{"credibility":3,"name":"https://x.com/QuillAudits_AI/status/2008459614711386457","type":"other","url":""},{"credibility":3,"name":"https://smartcontractshacking.com/hacks/tmx-tribe-hack-2026","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://rekt.news/tmztribe-rekt","type":"other","url":""},{"credibility":3,"name":"https://nulltx.com/certik-flags-1-4m-exploit-linked-to-tmx-tribe-on-arbitrum/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://rekt.news/tmztribe-rekt","type":"other","url":""},{"credibility":3,"name":"https://nulltx.com/certik-flags-1-4m-exploit-linked-to-tmx-tribe-on-arbitrum/","type":"other","url":""},{"credibility":3,"name":"https://bitcoinethereumnews.com/finance/certik-flags-1-4m-exploit-linked-to-tmx-tribe-on-arbitrum/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.globenewswire.com/news-release/2025/05/26/3088231/0/en/TRIBE-DEX-Brings-Real-DeFi-Utility-to-Life-with-TMX-TGE-Only-485-ETH-Available-After-871K-Raised.html","type":"other","url":""},{"credibility":3,"name":"https://www.globenewswire.com/news-release/2025/08/26/3139061/0/en/TMX-DEX-Announces-Token-Launch-Empowering-Global-Traders-with-100x-Opportunity.html","type":"other","url":""},{"credibility":3,"name":"https://finance.yahoo.com/news/tribe-dex-brings-real-defi-161200483.html","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://tribe-dex.com/","type":"other","url":""},{"credibility":3,"name":"https://x.com/TMXTribe","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://en.wikipedia.org/wiki/ZachXBT","type":"other","url":""}]}],"sources_used":[],"summary":"TMX TRIBE (also marketed as Tribe DEX) is a decentralized perpetual futures exchange operating on Arbitrum and Optimism that launched its TMX token in mid-2025. On January 5-7, 2026, an attacker exploited a critical logic flaw in unverified, unaudited smart contracts to drain approximately $1.4 million in user funds over 36 hours, with stolen assets subsequently bridged to Ethereum and laundered via Tornado Cash. The team deployed no emergency pause during the attack, issued no public statement for days afterward, and produced no post-mortem or user compensation plan, raising serious concerns about operational competence and transparency. ZachXBT has flagged the entity.","timeline":[{"date":"2025-05-26","event":"Tribe DEX announces public TGE for TMX token, with 485 ETH allocated after $871,000 raised in a private sale.","source":""},{"date":"2025-08-26","event":"TMX DEX announces token launch via GlobeNewswire, marketing '100x Opportunity' and referencing an unspecified 'Top 10 CEX' listing.","source":""},{"date":"2025-09-22","event":"TMX token listed on WEEX exchange as a spot trading pair (TMX/USDT).","source":""},{"date":"2026-01-05","event":"Attack begins on TMX TRIBE's Arbitrum contracts. Primary attacker address 0x763a67E4418278f84c04383071fC00165C112661 begins executing the mint-and-stake loop exploit against unverified LP contracts.","source":""},{"date":"2026-01-05","event":"CertiK Alert flags the exploit in progress. DefimonAlerts also detects anomalous activity.","source":""},{"date":"2026-01-06","event":"Exploitation continues for a second day. Team deploys contract upgrades on-chain but does not trigger an emergency pause. Approximately $1.2 million bridged to Ethereum via Across Protocol.","source":""},{"date":"2026-01-06","event":"TMX TRIBE team sends on-chain bounty message to exploiter from wallet 0x33392e39325013e81874ca7b76326858ec179543, offering 20% retention in exchange for 80% return. Exploiter does not respond.","source":""},{"date":"2026-01-07","event":"Exploitation concludes. Total loss approximately $1.4 million. Stolen funds deposited into Tornado Cash.","source":""},{"date":"2026-01-10","event":"As of at least four days post-exploit, TMX TRIBE has issued no public statement, post-mortem, or compensation plan. Rekt News publishes full incident documentation.","source":""}]},"v":1}