Rug Pull attacks on Arbitrum

$3M rug-pulled from Swaprum on Arbitrum, an Arbiswap fork whose audited contracts hid an upgradeable proxy with a backdoor add() function.

Hope Finance lost $1.86M at its Arbitrum launch after the deployed contract differed from the audited one; funds went straight to Tornado Cash.

Certik-audited Arbix Finance on Arbitrum minted 10M ARBX to attacker addresses, drained $10M in user deposits, and erased its entire web and social presence.