Verify a decision

{"actor":"system:backfill","investigation_id":"88f93946-9f2c-4759-9f76-2b60c05315a3","kind":"publish","page_slug":"rubic","published_at":"2026-05-28T03:34:43.595Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Rubic","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.coindesk.com/tech/2022/11/02/cross-chain-dex-rubic-loses-over-1m-in-funds-after-hackers-gain-access-to-private-keys","type":"other","url":""},{"credibility":3,"name":"https://www.web3isgoinggreat.com/?id=rubic-exchange-private-key-compromised-token-plummets","type":"other","url":""},{"credibility":3,"name":"https://cryptonews.com/news/decentralized-exchange-rubic-loses-1000000-exploit-involving-private-keys/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://quillaudits.medium.com/decoding-rubic-exchange-exploit-quillaudits-44828e71c417","type":"other","url":""},{"credibility":3,"name":"https://www.web3isgoinggreat.com/?id=rubic-cross-chain-exchange-hacked","type":"other","url":""},{"credibility":3,"name":"https://crypto.news/rubic-dex-aggregator-hack-leads-to-1-4m-of-user-funds-stolen/","type":"other","url":""},{"credibility":3,"name":"https://coincodecap.com/the-cross-chain-aggregator-rubic-has-been-exploited-for-nearly-1-4-million","type":"other","url":""},{"credibility":3,"name":"https://revoke.cash/exploits/rubic","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://rubic.exchange/blog/rubics-new-security-architecture/","type":"other","url":""},{"credibility":3,"name":"https://docs.rubic.finance/rubic/security","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.merklescience.com/blog/the-dfintoch-scam-origins-and-operations","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://tokeninsight.com/en/coins/rubic/team","type":"other","url":""},{"credibility":3,"name":"https://coinmarketcap.com/currencies/rubic/","type":"other","url":""},{"credibility":3,"name":"https://messari.io/report/understanding-rubic","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://rubic.exchange/blog/rubics-2024-yearly-report/","type":"other","url":""},{"credibility":3,"name":"https://messari.io/report/rubic-q4-2024-brief","type":"other","url":""},{"credibility":3,"name":"https://messari.io/report/rubic-q1-2025-brief","type":"other","url":""}]}],"sources_used":[],"summary":"Rubic is a cross-chain DEX aggregator founded in 2020 by Vladimir Tikhomirov and Alexandra Korneva, supporting swaps across 90+ blockchains. The protocol suffered two significant security incidents within two months in late 2022: a private key compromise in November that drained approximately $1.2 million in RBC tokens, followed by a smart contract exploit on December 25, 2022 that stole roughly $1.4 million in user USDC. Both events caused severe token price collapses, though the platform subsequently implemented new security architecture and remained operational into 2025.","timeline":[{"date":"2017-01-01","event":"Founders Vladimir Tikhomirov and Alexandra Korneva launch MyWish, a smart contract platform, establishing the team's crypto background.","source":""},{"date":"2020-01-01","event":"Rubic project founded; team raises approximately $500,000 (1,800 ETH) in initial funding.","source":""},{"date":"2022-11-02","event":"Admin wallet private key compromised; attacker drains approximately 34 million RBC/BRBC tokens worth ~$1.2 million and sells on Uniswap and PancakeSwap. RBC price collapses over 98%.","source":""},{"date":"2022-12-25","event":"Smart contract exploit: attacker exploits USDC miswhitelisting and lack of input validation in routerCallNative to steal ~$1.4 million in USDC from 49 users. Funds laundered through Tornado Cash.","source":""},{"date":"2022-12-25","event":"Rubic pauses all contracts and advises users to revoke approvals via revoke.cash.","source":""},{"date":"2022-12-29","event":"Rubic publishes post-hack weekly report, announces compensation plan capped at $5,000 per affected user funded from founder personal savings.","source":""},{"date":"2023-04-03","event":"Rubic relaunches with new security architecture: MixBytes-audited contracts, Gnosis Safe multisig, new CISO hired, Immunefi bug bounty program launched.","source":""},{"date":"2023-05-01","event":"DFintoch collapse ($31.6M exit scam) investigated by ZachXBT; Merkle Science notes swap contracts used for DFintoch laundering were also associated with Rubic exploit proceeds.","source":""},{"date":"2024-12-31","event":"Rubic reports 2024 full-year metrics: 828K+ transactions, $391.5M volume, 369K+ wallets.","source":""},{"date":"2025-03-31","event":"Rubic reports Q1 2025 record: $433 million in transaction volume across 93 supported blockchains.","source":""}]},"v":1}