Ekubo is a technically innovative DEX with strong tokenomics (100% circulating supply, fee-funded buybacks) and a clean Starknet track record. However, an authorization bypass in its EVM swap router was exploited for $1.4M on May 6, 2026, and the immutable contracts prevent patching. The singleton architecture and extensions system remain intact on Starknet, but EVM expansion credibility is compromised. Starknet ecosystem revenue headwinds (chain revenue down 99% from peak) add ecosystem risk. Suitable only for Starknet-native users who have revoked all EVM approvals and accept elevated smart contract and ecosystem concentration risk.
Risk Breakdown
Top Risks
On May 6, 2026, an authorization bypass in Ekubo's EVM swap router (v2 extension) allowed an attacker to drain $1.4M in WBTC from users who had open token approvals. The EVM contracts are immutable — the vulnerability cannot be patched. Users with existing approvals to the EVM router remain exposed until they revoke.
Ekubo's singleton contract architecture consolidates all pool state into a single contract — while gas-efficient, a vulnerability in the singleton could compromise all liquidity pools simultaneously rather than being isolated to individual pools.
Built primarily on Starknet (now expanding to EVM), Ekubo inherits L2 risks including sequencer centralization, data availability dependency on Ethereum, and potential Starknet-specific bugs in the Cairo programming language.
Frequently Asked Questions
Is Ekubo safe to use?
What are the main risks of using Ekubo?
What is Ekubo's risk score breakdown?
How does Ekubo compare to other DEX protocols?
Has Ekubo ever been hacked or exploited?
Incident History
Get risk alerts before it's too late
Weekly grade changes, downgrade alerts, and new protocol risk findings. Free.