Rubic exchange exploited for nearly $1.4 million days after making an appreciation post for the auditing platform CertiK

The heartwarming appreciation post

Rubic holders christmas day surprise

Rubic had the following to say on twitter following the exploit -

“Dear Rubicans, One of our routing contracts might be compromised. All contracts will be stopped until we understand the situation fully. Please don't use rubic.exchange. Revoke etherscan.io/address/0x3335… ASAP via revoke.cash”

“Our token and DEX liquidity have not been touched. We will update you on the situation, please stay tuned.”

“Rubic's contracts connected with the platform have been paused, There is no opportunity for further harm. Our services will resume again after a round of audits.

Rubic will strive to compensate for the losses - please contact support.”

This exploit also comes only a couple months after an exploit of 34 million rubic tokens due to a wallet being compromised

“Rubicans,

One of our admin’s wallet addresses was compromised. This wallet managed the RBC/BRBC bridge and staking rewards.

We suspect it was malicious software that was used to get access to the admin wallet's private keys.

Around 34M of RBC/BRBC were sold on Uniswap and PancakeSwap.

Rubic.exchange continues to work without interruption and your staking funds are safe. None of our contracts were exploited, rather it was the private keys of the wallet that were compromised.

It is important to note that none of our contracts allow users’ funds for swaps or staking to be moved to unintended destinations. Your funds are always safe.

The team is dealing with the situation and we will keep you updated on our next steps.

Staking rewards will resume in a couple of days. We will post the admin's wallet address, as well as the hacker's wallet address.

Compromised Rubic Address: 0x105A3BA3637A29D36F61c7F03f55Da44B4591Cd1 Hacker's Address: 0xD2D113d7b5c4F8FB4A68cEDa26F894F0fE25F24a”