Bridge Incident Registry
Bridge entity

Rubic

Rubic is a cross-chain swap and bridge aggregator. It is included because a November 2022 private-key compromise affected the wallet used by its former RBC/BRBC bridge and a separate December 2022 RubicProxy flaw exposed approved user USDC, followed by contract suspension, replacement, audits, and continuing operation.

active reviewed current

Bridge facts

Canonical name
Rubic
Type
Bridge Aggregator
Status
Active
Confidence
High
Primary chains
Ethereum, BNB Chain, Polygon, Avalanche, Arbitrum, Optimism, Fantom, Unknown
Primary assets
ETH, WETH, USDC, USDT, RBC, BRBC, Unknown
Operator
Rubic team
Ecosystem
Rubic
Launch date
2020-09
End date
Unknown
Terminal reason
Not applicable / unknown
Last reviewed
2026-07-28
Last verified
2026-07-28

Incident cases

  • Rubic 2022 RubicProxy approval exploit2022-12-25

    A RubicProxy routing flaw allowed arbitrary calls through a whitelisted USDC address and exposed user allowances. Security reports placed the stolen user funds around USD 1.4–1.5 million, after which affected contracts were stopped and later replaced with rewritten and audited contracts.

    ExploitApproximately USD 1.4–1.5 millionUnresolved

  • Rubic 2022 RBC/BRBC bridge wallet compromise2022-11-02

    A private key for an administrative wallet used by Rubic's former RBC/BRBC bridge and staking rewards was compromised. Rubic reported that approximately 35 million RBC/BRBC were sold and that the former native bridge had already been disabled and replaced by an external bridge.

    Abnormal Transfers35 million RBC/BRBC sold; approximately 138 ETH proceeds reportedUnresolved

Evidence records

Official URL status

Official URL recorded as live_verified: https://rubic.exchange/