rubic

ChainCatcher news, according to official sources, the multi-chain DeFi platform Rubic has announced that it has received funding from Space ID, with the specific amount not disclosed. In addition, Rubic also announced that it has integrated the domain name software development kit Web3 Name SDK, which brings seamless domain usage support to enhance users' cross-chain experience.

ChainCatcher news, according to The Block, blockchain customer relationship management (CRM) solution provider MetaCRM has completed a $2.5 million seed round financing, led by Cherubic Ventures, with participation from Ondine Capital, Red Building Capital, Tribe Accelerator, MR.Block, former Asana CEO Oliver Jay, and former Meta Asia Pacific marketing head Deeps.D.MetaCRM stated that the new round of funding will be used to launch new products, accelerate customer expansion and user growth, and better integrate multi-chain data of the product to create an enhanced blockchain experience for brands and users.It is reported that MetaCRM connects on-chain and off-chain data to create blockchain-native solutions and analytical tools, including MetaForm, MetaDesk, and MetaPanel. (source link)

ChainCatcher news, according to Tech in Asia, the Web3 customer relationship management platform MetaCRM has completed a $2.5 million seed round financing, led by Cherubic Ventures, with participation from Ondine Capital, Red Building Capital, and Tribe Accelerator.It is reported that MetaCRM is headquartered in Taiwan, and its products can connect on-chain and off-chain data to create blockchain-native solutions and analytical tools. One of MetaCRM's main products, MetaForm, can collect feedback and data, and provide other features such as NFT creation. In addition, MetaCRM plans to integrate ChatGPT into the system. (Source link)

According to ChainCatcher news, the SlowMist security team reports that the Rubic cross-chain aggregator project has been attacked, resulting in the theft of USDC from user accounts. The SlowMist security team shared the following in a brief:Rubic is a DEX cross-chain aggregator that allows users to exchange Native Tokens through the routerCallNative function in the RubicProxy contract. Before the exchange, it checks whether the target Router provided by the user is on the protocol's whitelist.Only after passing the whitelist check will the target Router provided by the user be called, and the call data is also provided externally by the user.Unfortunately, USDC was also added to the Router whitelist of the Rubic protocol, allowing any user to call USDC through the RubicProxy contract.Malicious users exploited this issue by calling the USDC contract through the routerCallNative function to transfer USDC from users who had authorized the RubicProxy contract to the malicious user's account via the transferFrom interface.The root cause of this attack lies in the Rubic protocol's erroneous addition of USDC to the Router whitelist, leading to the theft of USDC from users who had authorized the RubicProxy contract. (Source link)

ChainCatcher news, according to monitoring by Beosin EagleEye, a blockchain security audit company under Beosin, the Rubic project has been attacked. The Beosin security team analyzed that the routerCallNative function of the RubicProxy contract lacks parameter validation, allowing _params to specify arbitrary parameters. Attackers can use a specific integrator to enable the RubicProxy contract to call the function data they provide at almost zero cost.By calling the routerCallNative function, the attacker transferred all USDC authorized to the RubicProxy contract to the address 0x001B via transferFrom, stealing nearly 1100 Ethereum. Through Beosin Trace, it was discovered that all stolen funds have been transferred to Tornado cash.

ChainCatcher news, according to PeckShield monitoring, the multi-chain exchange protocol Rubic has been hacked, resulting in a loss of over $1.4 million. Currently, the attacker has transferred 1,100 ETH to Tornado Cash.According to PeckShield's subsequent investigation, the hack was made possible due to the erroneous addition of USDC to the supported router. Additionally, due to the lack of validation in routerCallNative, the hacker was able to withdraw all funds from users who had already approved RubicProxy. (source link)

ChainCatcher news, multi-chain exchange protocol Rubic tweeted that one of its administrator's wallet addresses was compromised. This address manages the RBC/BRBC cross-chain bridge and staking rewards, and it is suspected that malware stole the private key. It is reported that the attacker sold approximately 34 million RBC/BRBC on Uniswap and PancakeSwap, and users' staking funds are safe; the smart contract has not been exploited. The team is addressing the situation and will notify the next steps in a timely manner. Staking rewards will be restored in a few days. (Source link)