Hack history / 2022 / Hack or exploit
Rubic
Hack or exploit on Dec 25, 2022 · Arbitrary External Call
ATTACK TX CONFIRMED ON CHAINSOURCES AGREE ON DATE AND LOSS · 4 SOURCES
Lost
$1.4M
sources: $1.4M to $1.5M
Returned
none listed
as the sources state it
Rank
#814
among thefts by dollars lost
What happened
Rubic lost $1.4M on December 25, 2022 when USDC was mistakenly added to the router whitelist and routerCallNative lacked input validation. Attacker exploited user pre-approvals to RubicProxy by calling arbitrary contracts, draining USDC directly from user wallets.
Details
- Date
- Dec 25, 2022
- Kind
- Hack or exploit
- Method
- Arbitrary External Call
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- Ethereum
Related incidents
Rubic 2022 · Hack or exploit · $1.2M
BasketDAO 2022 · Hack or exploit · $1.2M
Auctus 2022 · Hack or exploit · $726K
Brahma Finance 2022 · Hack or exploit · $89K
BasketDAO 2022 · Hack or exploit · $1.2M
Auctus 2022 · Hack or exploit · $726K
Brahma Finance 2022 · Hack or exploit · $89K
Cite this page
SwanBluechip, "Rubic hack, Dec 25, 2022: $1.4M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/htc875da2447/ (data as of 2026-10-31).