Ethereum

Blast

2024

Samurai

Read

<div class="protos">
 <div>
  <div>
   <div>
    <p>Food-themed crypto game Super Sushi Samurai was exploited for approximately $4.6 million today, though it appears to have been a white-hat operation.</p>
    <p>The project’s token, SSS, contained a vulnerability within its contract that allowed for duplicating balances when making a transfer between the same ‘to’ and ‘from’ address.</p>
    <p>At the time of writing, the proceeds, 1,310 Wrapped Ether (<a rel="noopener noreferrer nofollow" title="WETH" href="https://thebittimes.com/tag/weth.html">WETH</a>) worth <strong>$4.6 million</strong>, remain in the exploiter’s address.</p>
    <figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
     <div class="wp-block-embed__wrapper">
      <blockquote class="twitter-tweet" data-width="500" data-dnt="true">
       <p lang="en" dir="ltr">SSS exploited on blast for ~$4.8m pic.twitter.com/YpVLBYGqw7</p>— Spreek (@spreekaway) March 21, 2024
      </blockquote>
     </div>
    </figure>
    <p><em>Read more: Ethereum’s Dencun causes ‘Blast’ layer 2 outage</em></p>
    <p><a rel="noopener noreferrer nofollow" title="Super Sushi Samurai" href="https://thebittimes.com/tag/super-sushi-samurai.html">Super Sushi Samurai</a> had gone live just hours earlier on Blast, the controversial Ethereum layer-2 network, with the SSS token launched on March 17. The project had previously been runner-up in Blast’s recent Big Bang contest.</p>
    <p>The project’s team confirmed the hack, known as an ‘infinite mint’ attack, stating “Tokens were minted and sold into the LP.” As a result, the token’s value <strong>dropped over 99%</strong>, according to data from CoinMarketCap.</p>
    <p>Just over a month ago, the same vulnerability was used to <a rel="noopener noreferrer nofollow" title="Hack" href="https://thebittimes.com/tag/hack.html">Hack</a> another token, MINER. Despite this, an audit of the token contract by Verichains failed to pick up the bug.</p>
    <figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
     <div class="wp-block-embed__wrapper">
      <blockquote class="twitter-tweet" data-width="500" data-dnt="true">
       <p lang="en" dir="ltr">It's literally only been a month since we last saw this.<br><br>Study past exploits. Lessons in there. pic.twitter.com/bXGsgVVhUG</p>— quit.q00t.eth (,) (@0xQuit) March 21, 2024
      </blockquote>
     </div>
    </figure>
    <p><em>Read more: Critics decry Blast as the latest sketchy scheme on Ethereum</em></p>
    <p>Luckily, however, the attack appears to have been conducted by a <a rel="noopener noreferrer nofollow" title="white-hat" href="https://thebittimes.com/tag/white-hat.html">white-hat</a> <a rel="noopener noreferrer nofollow" title="Hack" href="https://thebittimes.com/tag/hack.html">Hack</a>er to rescue at-risk funds. The team was informed via an on-chain message sent by the <a rel="noopener noreferrer nofollow" title="Hack" href="https://thebittimes.com/tag/hack.html">Hack</a>er shortly after the alarm was raised.</p>
    <p>Blast’s use of a FOMO-inducing points campaign and VC-backing to draw enormous total value locked (TVL) attracted plenty of criticism when it was first announced. Skeptics noted the fact that the project’s ‘bridge’ was <strong>nothing more than a multisig wallet</strong>, while the network itself had yet to be built.</p>
    <p><em>Got a tip? Send us an email or ProtonMail. For more informed news, follow us on&nbsp;X,&nbsp;</em><em>Instagram</em><em>,&nbsp;</em><em>Bluesky</em><em>, and&nbsp;</em><em>Google News</em><em>, or subscribe to our&nbsp;</em><em>YouTube</em><em>&nbsp;channel.</em></p>
   </div>
  </div>
 </div>
</div>
<p>Source: <a rel="noopener noreferrer nofollow" target="_blank" href="https://thebittimes.com/crypto-game-exploited-for-4-6m-hacker-claims-to-be-white-hat-tbt83192.html">https://thebittimes.com/crypto-game-exploited-for-4-6m-hacker-claims-to-be-white-hat-tbt83192.html</a></p>

Crypto game exploited for $4.6M, hacker claims to be white-hat

TheBitTimes

Other articles published on Mar 21, 2024

Layerswap domain hijack ends, $100k stolen funds to be refunded

Solana Meme Coin Slerf Offers NFT To Presale Investors After $10M Mishap

Attention Turn to New Token Presale as Arbitrum (ARB) Records Significant Bear Trend, Near Protoc...

North Korea’s Cyber Operations Finance Weapons Program

OKX terminates services in India, asks users to withdraw funds by April 30

Raised Above $6.3M – BlockDAG Presale Success Eclipses Ethereum Upgrades And The Rise of Solana M...

Join our free newsletter for daily crypto updates!