Rexas Finance: The Definitive Post-Mortem — CertiK Audit, On-Chain Evidence, and the Anatomy of a 0M Rug

Rexas Finance (RXS) is a case study in how modern crypto scams operate. Not the obvious Ponzi with anonymous developers and a disappearing website — this was a professional operation with a CertiK audit, exchange listings, and influencer backing. Six months after launch, RXS is down 99% from its listing price. This is the complete forensic breakdown.

The Evidence on the Blockchain

Before analyzing the project's mechanics, let's look at what the blockchain tells us. RXS's contract address on Etherscan is 0x9eaebd7e73d97e78c77fab743e6ffa1b550e224c. The token launched on June 19, 2025, on three exchanges simultaneously: MEXC, BitMart, and LBank.

At its peak on launch day, RXS briefly touched approximately /bin/bash.10-0.12 before collapsing. Within 72 hours, it had lost 85% of its value. By the end of June 2025, RXS had shed 99% of its value from the presale price. As of March 2026, the token trades at approximately /bin/bash.0016 — down 99.4% from listing price and 99.8% from its presale reference price.

With 48,781 holders at launch, the distribution was heavily concentrated. On-chain analysts noted that the top 10 wallets controlled approximately 60% of the total supply at launch — a classic indicator of an insiders-heavy distribution designed to enable coordinated selling.

The CertiK Audit: 53/100 and Two Unresolved Centralization Issues

The most damning evidence against Rexas comes not from social media but from their own audit report.

Rexas Finance paid CertiK — one of the crypto industry's most widely-used auditing firms — to audit their token contract and project. The results were quietly published on Rexas's own website and on CertiK's SkyNet platform.

The scores tell the story:

• Token Smart Contract Code Score: 72/100
• Overall Project Score: 53/100

A 53/100 is barely passing. It means CertiK identified significant concerns. The 72/100 code score is particularly troubling — CertiK's own documentation notes that scores below 80 indicate moderate security concerns requiring attention.

More critically, CertiK identified 6 total findings, including 2 Major Centralization issues. Both were acknowledged by the Rexas team but never resolved. CertiK SkyNet shows the status clearly: 2 Major findings, 2 Acknowledged, 0 Resolved.

Centralization issues in a token contract mean the team retains administrative powers that could allow them to: freeze transfers, mint new tokens, modify supply, or otherwise manipulate the token's economics without holder consent. In a properly decentralized token, no such powers should exist.

The Dangerous Claim: '100% Secure & Verified By CertiK'

Despite CertiK's findings, Rexas's own website banner stated: 'Audited | 100% Secure & Verified By CertiK.'

This is either a deliberate lie or a gross misrepresentation. CertiK explicitly warns against this interpretation. On Rexas's own audit page, CertiK's report notes: 'unresolved centralization issues' and 'moderate security scores, advising extreme caution.'

The LBank price page for RXS puts it bluntly: 'Furthermore, claims of being '100% secure' based on a CertiK audit contradict the reported audit results, which revealed unresolved centralization issues and moderate security scores, advising extreme caution.'

Rexas used CertiK's name as marketing leverage while ignoring its actual findings. This is a pattern: get an audit from a reputable firm, cherry-pick the parts that make you look good, bury the rest.

The Presale Structure: A Vesting Trap

The Rexas presale ran for months, constantly extending its 'final stage' deadline. This is a common pressure tactic — extending the presale creates artificial urgency while allowing the team to continue accumulating presale funds.

When presale investors finally received their RXS tokens, they discovered a vesting schedule that locked them into releasing only 10% of their allocation per week. Meanwhile, team tokens and early insider allocations were subject to shorter vesting periods — or no vesting at all.

The result was mathematically guaranteed: when RXS listed on exchanges, insiders could sell immediately while retail was locked. The price collapse that followed was not bad luck — it was the intended outcome of the vesting structure.

As one Reddit user correctly identified before the launch: 'Same scam as Retik and Renq. You'll see near the end of presale they'll release a vesting schedule. If it's similar to their previous scams, you'll likely get 10% of your tokens every week following... and the price will be dead by then.'

The Change from InterFi to CertiK: A Red Flag in Itself

Early investors in the Rexas presale report that the project initially announced an audit from InterFi. InterFi is a blockchain analytics and audit service, but one with significantly less market credibility than CertiK.

Shortly before launch, Rexas switched to CertiK for their audit. The reason given publicly was vague — they claimed CertiK provided 'more thorough' coverage. The more likely explanation: savvy crypto investors had begun checking for audits, and a low-grade InterFi audit would have raised immediate red flags. The switch to CertiK was cosmetic — a better marketing badge, not a better security posture.

The fact that the audit changed in the final weeks before launch, combined with the failure to resolve the two Major issues CertiK identified, suggests the audit was pursued for optics rather than security improvement.

The Numbers: 0M Raised, 99% Wiped Out

Estimates based on presale pricing and reported sale volumes suggest Rexas raised approximately 0-50 million during its extended presale period. This is not a small-time operation — this is a professional-grade scam that managed to attract significant institutional-adjacent capital.

At its peak, RXS had a fully diluted valuation of approximately 0-100 million based on listing prices. Within 72 hours of CEX listing, that valuation had collapsed to under million. The destruction of wealth was rapid and total.

The Team: Anonymous, Then Not

Early versions of Rexas's marketing materials featured anonymous team members — stock photos with fake names. When this was called out, the team eventually published LinkedIn profiles for key members.

The profiles showed generic 'crypto entrepreneur' backgrounds with few verifiable credentials. No names matched individuals with prior success in blockchain development, finance, or related fields. This is common in crypto scam projects — the team consists of marketers and developers who understand just enough about token engineering to create a convincing front-end, but nothing that would constitute genuine infrastructure.

What Exchanges Said About RXS

After the crash, MEXC published an analysis titled 'Can RXS Rebound in 2026 After 90% Crash?' — already framing the token as a potential loss, not a recovery opportunity. The language was careful: 'Deep Dive Into Rexas Finance's Survival Path.' There was no survival path. There was arug pull.

LBank's page for RXS directly called out the CertiK misrepresentations: 'Furthermore, claims of being 100% secure based on a CertiK audit contradict the reported audit results.'

These exchanges listed RXS anyway, collected listing fees, and watched the price collapse. The incentive structure of CEX listings — pay-to-list with no ongoing accountability — is itself a contributor to the persistence of scams like Rexas.

Community Evidence: The Before-and-After Pattern

The Rexas Telegram and Discord communities tell the story of a classic pump-and-dump cycle. Pre-launch, the channels were filled with celebration posts, hype memes, and promises of generational wealth. Post-crash, the same channels were flooded with angry investors demanding answers, while moderators deleted critical posts and banned questioners.

Trustpilot reviews — which Rexas could not delete — tell a consistent story: 'This is a scam!! Glad the genius act got passed this week. I hope u all end up in prison.' Another reviewer noted: 'The team deletes any negative comments and blocks people who question the project.'

The deletion of critical comments is itself evidence. Legitimate projects welcome scrutiny; scammers cannot afford it.

How to Identify the Next Rexas

The warning signs, in retrospect, are obvious. But FOMO is a powerful drug, and when everyone is telling you to buy, critical analysis goes out the window. Here's the checklist that would have identified Rexas as high-risk:

1. CertiK score below 80 — A token code score below 80 from CertiK should be an automatic disqualifier. Look for scores above 85, preferably above 90.

2. Unresolved audit findings — CertiK's SkyNet shows the resolution status of every finding. Any 'Acknowledged but Not Resolved' findings — especially Major or Critical — are disqualifying.

3. Centralization risks in a 'decentralized' token — If the team can mint new tokens, freeze transfers, or modify supply, the token is not decentralized. It's a centralized database with a token attached.

4. Vesting schedules that favor insiders — If team tokens unlock before or faster than retail, the incentives are misaligned. Insiders will sell into retail's buying.

5. Marketing that misrepresents audit results — If a project claims to be '100% audited' or '100% secure' while their audit shows unresolved issues, they are lying. Walk away.

6. Presale extensions — Legitimate projects have defined timelines. 'Presale ending soon!' that keeps extending is a pressure tactic, not a real deadline.

7. Anonymous or generic teams — Can you verify the team members' identities and track records? If not, you have no recourse if they run.

The Broader Implications: Why Rexas Keeps Happening

Rexas is not an anomaly. It's the predictable outcome of a market where: (a) retail investors chase outsized returns without doing due diligence, (b) influencers are paid to promote without disclosure, (c) CEXs collect listing fees without accountability for outcomes, and (d) auditing firms publish accurate but easily misrepresented reports.

The tools exist to identify scams like Rexas. CertiK's own data is publicly available. The information that RXS had a 53/100 score and two unresolved Major issues is accessible to anyone who looks. The problem is that most investors don't look — they see the hype, the influencers, the 'audited by CertiK' badge, and they buy.

If you take one lesson from the Rexas disaster, let it be this: the audit badge is not a guarantee. It's a starting point for research. The CertiK score of 53/100 should have been the beginning of a rejection, not a green light. When the project's own marketing misrepresents what that score means, you should assume the misrepresentation is intentional and walk away.

RXS is a 99% loss for most investors who bought at presale or launch. The team moved on to other projects. The influencers collected their payments. The exchanges collected listing fees. The only people who lost real money are the retail investors who trusted the wrong people with their savings.