2022.12.25 - Rubic

On 2022.12.25 our system detected a deployment of a potentially malicious contract. The system analyzed the contract and deduced the possible target to be Rubic cross-chain protocol. Around 1 minute later the contract was called and the system detected the exploit, in which 1161 ETH were stolen. 8 minutes after the first transaction, the contract was called again and extra 27 ETH were stolen. The stolen funds (a total amount of 1188 ETH, worth around $1.4M) were cashed-out via Tornado Cash.