Skip to main content
Sign in

TMX TRIBE

avoid.net/tmx-tribe→18/100·78% conf.
[AI-DRAFTED · AWAITING VERIFICATION][src:defillama]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·2pMSjB…kHLc

Summary

TMX TRIBE (also marketed as Tribe DEX) is a decentralized perpetual futures exchange operating on Arbitrum and Optimism that launched its TMX token in mid-2025. On January 5-7, 2026, an attacker exploited a critical logic flaw in unverified, unaudited smart contracts to drain approximately $1.4 million in user funds over 36 hours, with stolen assets subsequently bridged to Ethereum and laundered via Tornado Cash. The team deployed no emergency pause during the attack, issued no public statement for days afterward, and produced no post-mortem or user compensation plan, raising serious concerns about operational competence and transparency. ZachXBT has flagged the entity.

Connected Entities

1 entities
Organizations
□TMX TRIBE
Relationships
    Have evidence about TMX TRIBE?

    Timeline(9 events)

    26 May 2025

    Tribe DEX announces public TGE for TMX token, with 485 ETH allocated after $871,000 raised in a private sale.

    26 August 2025

    TMX DEX announces token launch via GlobeNewswire, marketing '100x Opportunity' and referencing an unspecified 'Top 10 CEX' listing.

    22 September 2025

    TMX token listed on WEEX exchange as a spot trading pair (TMX/USDT).

    5 January 2026

    Attack begins on TMX TRIBE's Arbitrum contracts. Primary attacker address 0x763a67E4418278f84c04383071fC00165C112661 begins executing the mint-and-stake loop exploit against unverified LP contracts.

    5 January 2026

    CertiK Alert flags the exploit in progress. DefimonAlerts also detects anomalous activity.

    6 January 2026

    Exploitation continues for a second day. Team deploys contract upgrades on-chain but does not trigger an emergency pause. Approximately $1.2 million bridged to Ethereum via Across Protocol.

    6 January 2026

    TMX TRIBE team sends on-chain bounty message to exploiter from wallet 0x33392e39325013e81874ca7b76326858ec179543, offering 20% retention in exchange for 80% return. Exploiter does not respond.

    7 January 2026

    Exploitation concludes. Total loss approximately $1.4 million. Stolen funds deposited into Tornado Cash.

    10 January 2026

    As of at least four days post-exploit, TMX TRIBE has issued no public statement, post-mortem, or compensation plan. Rekt News publishes full incident documentation.

    Provenance & Audit Trail
    Anchored on SolanaVerify on-chain11 Wayback Archivessrc:defillama

    Decision Log

    This investigation is cryptographically anchored to the Solana blockchain (1 event). 11 of 14 cited source URLs have an Internet Archive snapshot.

    full audit log →version history →

    model: claude-sonnet-4-6

    generated: 5/4/2026, 2:54:19 AM

    last updated: 8/29/2026, 11:26:11 PM

    avoid.net — verified advice for a post-truth world