Rujira pauses its app layer after exploitation of BTC/USDC liquidity positions
Rujira says an attacker exploited the skew calculation in its BTC/USDC concentrated liquidity strategy. It estimates about $200,000 in losses and plans to reimburse affected positions. CosmWasm is paused during recovery.
- Disclosed
- Nov 11, 2026
- Public disclosure date
- Severity
- Septic Tank Blew
- No CVE: a breach, not a bug
- Splash zone
- Existing BTC/USDC custom concentrated liquidity positions on Rujira Trade, including positions held by Liquidy Finance.
- Rujira · THORChain · DeFi
- In the wild
- Yes
- Rujira confirms exploitation of the BTC/USDC liquidity strategy.
What happened
CCL lets liquidity providers concentrate funds within a selected price range. The skew parameter determines how liquidity is distributed within that range. Rujira says a flaw in that calculation let the attacker push existing BTC/USDC positions out of balance. Official post
The project estimates about $175,000 in losses from Liquidy Finance’s CCL positions and about $25,000 from other user funds. These are project estimates. Rujira says it plans to reimburse all losses and remove the skew parameter from the contract, then ask THORChain nodes to resume the app layer. The published estimate of one to two days is a recovery target. The reviewed disclosures provide no completed payouts, fixed release or confirmed restart time.
Crime-scene timeline
Nov 10, 2026
Suspicious trading appears on Rujira Trade
Rujira reports a BTC/USDC price spike and a burst of order book activity.
Nov 11, 13:30 UTC
Rujira confirms exploitation and describes the pause
The project attributes the imbalance to the CCL skew calculation. It says CosmWasm is halted and outlines a contract change and reimbursement.
Who said what
We list each claim and who made it. Primary sources (the vendor, the researcher, the registry) are marked. Where reports disagree, we grade by the worst credible case.
- Rujira incident update, public copyPrimaryRecords the observed trading, affected strategy, loss estimate, pause and planned recovery.
- Rujira strategy documentationPrimaryExplains CCL and how its skew parameter affects orders.