Attack contract doubled tokens 25 times before mass sell-off
An exploit executed on Mar. 21 drained $4.6 million in user funds from Super Sushi Samurai (SSS), a game built on Ethereum’s layer-2 blockchain Blast. According to a report by blockchain security firm CertiK, the game’s native token experienced a 99% slippage due to a suspicious token dump, which led to the funds being drained.
The exploiter purchased 690 million SSS tokens and transferred them to an attacking contract, multiplying the tokens 25 times to end up with 11.5 trillion and swapping them for 1,310 Ether (ETH).
The vulnerability stemmed from the ‘contracts _update()’ function, which failed to correctly update balances when transferring tokens to oneself. The stolen funds are currently in the exploiter’s wallet.
Through an X post, the SSS team stated that they are in contact with the exploiter, who is supposedly a white hat hacker, and both parties are working on the safe return of funds.
The information on or accessed through this website is obtained from independent sources we believe to be accurate and reliable, but Decentral Media, Inc. makes no representation or warranty as to the timeliness, completeness, or accuracy of any information on or accessed through this website. Decentral Media, Inc. is not an investment advisor. We do not give personalized investment advice or other financial advice. The information on this website is subject to change without notice. Some or all of the information on this website may become outdated, or it may be or become incomplete or inaccurate. We may, but are not obligated to, update any outdated, incomplete, or inaccurate information.
Crypto Briefing may augment articles with AI-generated content created by Crypto Briefing’s own proprietary AI platform. We use AI as a tool to deliver fast, valuable and actionable information without losing the insight – and oversight – of experienced crypto natives. All AI augmented content is carefully reviewed, including for factural accuracy, by our editors and writers, and always draws from multiple primary and secondary sources when available to create our stories and articles.
You should never make an investment decision on an ICO, IEO, or other investment based on the information on this website, and you should never interpret or otherwise rely on any of the information on this website as investment advice. We strongly recommend that you consult a licensed investment advisor or other qualified financial professional if you are seeking investment advice on an ICO, IEO, or other investment. We do not accept compensation in any form for analyzing or reporting on any ICO, IEO, cryptocurrency, currency, tokenized sales, securities, or commodities.
See full terms and conditions.
