Ekubo Protocol
Summary
Ekubo Protocol is a concentrated-liquidity AMM DEX launched on Starknet in mid-2023 and subsequently expanded to Ethereum and Arbitrum. Founded by Moody Salem, a former Uniswap Labs engineer, the protocol is governed by an on-chain DAO and has commanded roughly 60% of Starknet DEX TVL. In May 2026 the protocol's EVM V2 swap router contracts suffered an access-control exploit that drained approximately $1.4 million in WBTC from user wallets; the Starknet core deployment was unaffected, and the team funded an on-chain recovery fund for victims.
Connected Entities
1 entities · 10 linked investigations- + 3 more
Community submissions
- Under reviewincriminatingWayback pending6/28/2026, 4:13:23 PM
“The Block reporting on the 1.4M WBTC drain from Ekubo EVM router contracts via callback verification flaw, 85 transactions across Ethereum and Arbitrum. Blockaid confirmed missing payer verification in IPayer.pay callback as root cause.”
— avoid-scout
Timeline(11 events)
2023-01-01
Ekubo Protocol founded by Moody Salem (former Uniswap Labs engineer); Ekubo, Inc. incorporated in New York
Tracxn / Delphi Digital research2023-10-29
Uniswap DAO temperature check passes (63% in favor) to invest $12M UNI for 20% of future Ekubo governance tokens; proposal later withdrawn by Ekubo before on-chain vote
The Block2024-05-15
EKUBO token generation event (TGE) completed; 10 million total supply distributed across airdrop (33.3%), token sale (33.3%), and team/company allocation (33.3%)
Ekubo Protocol Official Docs — EKUBO Token2025-11-19
Code4rena competitive audit of EVM V3 contracts begins; four medium-severity vulnerabilities identified, concluding December 10, 2025
Code4rena Audit Page2026-02-01
Riley Holterhus update audit of EVM contracts completed
Ekubo Protocol Official Docs — Audits2026-05-05
EVM V2 extension contracts on Ethereum and Arbitrum exploited via callback authorization flaw; approximately $1.4M in WBTC drained from user wallets across 85 transactions; Starknet deployment unaffected
The Block2026-05-06
Ekubo advises users to revoke approvals to affected contracts, publishes post-mortem, and funds on-chain recovery fund for exploit victims
Bankless2026-07-02
Ekubo files B-2 Token Transparency Report with Blockworks, scoring 39 out of 40 with zero disclosure gaps
Blockworks Token Transparency FilingDecision Log
- #3review revise+14⛓ pending8/19/2026, 4:40:04 PMhash: AFuFZQ1fxXKYf2h3Prp9QSJjbr1Y46PwdPJM9KHkUY9V
- #2review⛓ pending8/19/2026, 4:40:04 PMhash: 5735YxfuSKoL7z1a2YFRGxD533movNnaaPWCV1ALR5cF
- hash: EPY74SjVjVjuSMPMwiU5VwY9GicSL3M3Kj3Mw4Km26KQ
This investigation is cryptographically anchored to the Solana blockchain (1 event). 18 of 19 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 6/24/2026, 11:10:05 PM
last updated: 8/19/2026, 10:24:17 PM
avoid.net — verified advice for a post-truth world