Hello Andrew, Nice to meet you! I also got a similar request from Rohit Maini, who bought a bunch of Qube smart bulbs on a crowd funding campaign and they stopped working after the company went bankrupt. Reverse engineering the protocol for a bulb can take a considerable amount of time, and there could be unexpected roadblocks, such as security mechanisms.
Considering the fact that you can get new bulbs for about $10 USD, it would probably wiser to simply buy new bulbs instead of spending a bunch of hours (or days) trying to reverse engineer the old ones and writing a new app to control them.
If you just want to level-up your reverse engineering skills, then perhaps this can be a good exercise for you. Good luck!