Blast

2024

Samurai

Read

<p class="is-style-lead">A blockchain game native to layer-2 solution Blast suffered a tokens exploit hours before its gaming product launched.</p> 
<p>According to an announcement from the team on X, Super Sushi Samurai on L2 network Blast was exploited for $4.6 million due to a bug in its smart contract code. On-chain security firm <a href="https://x.com/CertiKAlert/status/1770831867748421764?s=20" target="_blank" rel="noreferrer noopener">CertiK</a> also confirmed the amount lost.&nbsp;</p> 
<blockquote class="wp-block-quote"> 
 <p>We have been exploited, it’s mint-related. We are still looking into the code. Tokens were minted and sold into the LP.</p> <cite>SSS team on X</cite>
</blockquote> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr"><a href="https://twitter.com/hashtag/CertiKInsight?src=hash&amp;ref_src=twsrc%5Etfw" target="_blank" rel="noopener">#CertiKInsight</a> 🚨<br><br>We have seen an incident affecting <a href="https://twitter.com/SSS_HQ?ref_src=twsrc%5Etfw" target="_blank" rel="noopener">@SSS_HQ</a> on Blast<br><br>Contract: 0xdfDCdbC789b56F99B0d0692d14DBC61906D9Deed<br><br>In total, $4.6m has been affected <a href="https://t.co/auAWqdIDU0" target="_blank">pic.twitter.com/auAWqdIDU0</a></p>— CertiK Alert (@CertiKAlert) <a href="https://twitter.com/CertiKAlert/status/1770831867748421764?ref_src=twsrc%5Etfw" target="_blank" rel="noopener">March 21, 2024</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div>
</figure> 
<p>Super Sushi Samurai launched its native crypto SSS on March 17 and scheduled its full game launch on March 21. However, an apparent white hat hacker leveraged the smart contract vulnerability to initiate an infinite mint function.&nbsp;</p> 
<p>The exploiter doubled the token balances by transacting with themselves and eventually mass selling into SSS’s liquidity pool. Last month, a similar incident occurred with a contract that multiplied balances.&nbsp;</p> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr"><a href="https://twitter.com/search?q=%24MINER&amp;src=ctag&amp;ref_src=twsrc%5Etfw" target="_blank" rel="noopener">$MINER</a> is hacked. Do not interact!<a href="https://t.co/9KTwG3ltSs" target="_blank">https://t.co/9KTwG3ltSs</a><br><br>The root cause is if you transfer to yourself, your balance would be doubled. <a href="https://t.co/EnOxoaIaja" target="_blank">pic.twitter.com/EnOxoaIaja</a></p>— Chaofan Shou (@shoucccc) <a href="https://twitter.com/shoucccc/status/1757777764646859121?ref_src=twsrc%5Etfw" target="_blank" rel="noopener">February 14, 2024</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div>
</figure> 
<p>Per CoinGecko, this crashed the price of SSS by over 99%.&nbsp; An update from the team said that the hacker had established communications. The hacker’s message, seen on Blastscan, suggested it was a rescue mission and a plan to reimburse users was in the works.&nbsp;</p> 
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper"> 
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">Hello white hat, we have reached out to you on Blockscan. Thank you for cooperating with us.<br><br>SSS Team<a href="https://t.co/gZyE6yKz7X" target="_blank">https://t.co/gZyE6yKz7X</a></p>— Super Sushi Samurai | SSS (@SSS_HQ) <a href="https://twitter.com/SSS_HQ/status/1770846767497564301?ref_src=twsrc%5Etfw" target="_blank" rel="noopener">March 21, 2024</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script> 
 </div>
</figure> 
<p>Smart contract exploits are common in crypto, particularly on newly launched networks like <a href="http://Blast mainnet halts for 1 hour due to Ethereum Dencun upgrade obstacle" target="_blank" rel="noreferrer noopener">Blast</a>. The Ethereum-based scaling network went live earlier this month and <a href="https://crypto.news/blast-layer-2-withdrawal-launch/" target="_blank" rel="noreferrer noopener">experienced</a> over $1.7 billion in withdrawals shortly after.&nbsp;</p> 
<p>According to DefiLlama, Blast is still one of the largest L2s&nbsp; as of writing, with more than $1 billion in total value locked.&nbsp;</p> 
<figure class="wp-block-image size-large">
 <img loading="lazy" decoding="async" width="1024" height="723" src="https://crypto.news/app/uploads/2024/03/Screenshot-342-1024x723.png" alt="Blockchain game on Blast suffers $5m mint exploit&nbsp; - 29" class="wp-image-14260107">
 <figcaption class="wp-element-caption">
  SSS token after white hat rescue | Source: CoinGecko
 </figcaption>
</figure> 
<p> Read more: <a href="https://crypto.news/blast-network-layer-2-project-prey-500-eth-rug-pull/"> Blast network’s layer 2 project falls prey to 500 ETH rug pull </a> </p>

Blockchain game on Blast suffers $5m mint exploit

crypto.news

Other articles published on Mar 21, 2024

Mintlayer Unveils User-Friendly Staking Platform with Massive 198% APY

Leading The Pack: Solana Captures Nearly 50% Of Global Crypto Attention

Immutable And OKX Join To Launch A GameFi Launchpad On OKX NFT Marketplace

Bitcoin Futures Spread Signals Speculative Frenzy

Galaxy S25: AI-Powered Journey Through Hurdles and Hope in Chipset Evolution

North Korea’s Cyber Operations Finance Weapons Program

Join our free newsletter for daily crypto updates!