ArbiSwap Rug Pull

Reported loss $138K
Arbitrum
Infinite Mint and Dump

What happened

ArbiSwap rugpulled users for 138,057 $USD worth of $ETH, after minting 1 trillion $ARBI tokens.

ArbiSwap is a DEX on the layer-2 chain Artibtrum. ArbiSwap was launched on February 24th, 2023, and offered the project's $ARBI token owners 100% of the revenue generated by DEX. The project quickly reached up to 4,400,000 $USD in TVL.

An ArbiSwap developer reported that their own man robbed the DEX, draining 84.6 $ETH from the $ARBI/$USDC pair. In the last 24 hours after the incident, the $ARBI token price dropped by 99%. The attacker has minted nearly 1,000,000,000,000 $ARBI tokens and drained the liquidity for 138,057 $USD.

All the stolen funds were transferred through TornadoCash.

Attacker address:

Address 0x8a60…724f

Attacker's ETH address:

Address 0x2a03…a869

Mint transaction:

Tx 0x0c1c…0abd

Transfer transactions:

Tx 0x54ca…16e1

Tx 0xf1a2…6df8

Protocol details

Classification Rugpull / Exchange (DEX) / Yield Aggregator
Protocol Type DEX
Affected asset / contract ARBI
Protocol links Website @Arbi_Swap

Build your security review skills

Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.