Crypto Firm Pulls the Rug from Under Investors with $10m Scam
infosecurity-magazine.com Jul 30, 2026

Crypto Firm Pulls the Rug from Under Investors with $10m Scam

AI-summarised brief · reviewed before publication

Arbix Finance, a yield farming platform previously audited by security firm CertiK, executed a rug pull scam, stealing approximately $10 million from investors. CertiK revealed that project developers directed funds to unverified pools before an unknown hacker drained the assets and converted them to Ethereum via AnySwap USDT. The exploited contract contained eight mint functions allowing unlimited token creation, which fell outside the original audit scope. This incident underscores vulnerabilities in decentralized finance, where rug pulls accounted for 37% of cryptocurrency fraud revenue in 2021, totaling over $2.8 billion. The ease of creating tokens on Ethereum without rigorous audits facilitates such exit scams, exploiting investors seeking high yields similar to traditional bank interest rates.

💡 Why It Matters

  • · The breach exposes critical gaps in third-party security audits, proving that certification does not guarantee safety if malicious code lies outside the reviewed scope.
  • · Investors must recognize that technical vetting offers limited protection against insider threats in decentralized ecosystems.