Blast

2024

when

Samurai

<p>Super Sushi Samurai, a blockchain game developed on the Blast layer-2 solution, was poised for its much-anticipated launch when it fell victim to a devastating exploit, resulting in the loss of $4.6 million. This incident occurred mere hours before the scheduled release of its gaming product, casting a shadow over the project’s debut and raising concerns about the security of decentralized applications (DApps).</p>
<h2 class="wp-block-heading" id="super-sushi-samurai-token-tanks-amid-4-6m-exploit">Super Sushi Samurai’ token tanks amid $4.6M exploit</h2>
<p>The GameFi project<a href="https://twitter.com/SSS_HQ/status/1770836683426062397" rel="noopener noreferrer nofollow" target="_blank"> Super Sushi Samurai</a> (SSS), which is built on Coinbase’s Base layer-2 blockchain and the Telegram messaging app, experienced a $4.8 million withdrawal on March 21.&nbsp;</p>
<p>This withdrawal was made by an individual who identified themselves as a white hat hacker after discovering a double-spending glitch in the system. Following an unauthorized token dump, the value of the token experienced a significant 99% slippage.&nbsp;</p>
<p>The perpetrator managed to siphon off 1310 ETH from the token’s primary liquidity pool by repeatedly doubling their balance and subsequently liquidating all of it, as per the information disclosed by Certik to the cryptocurrency community.</p>
<p>Super Sushi Samurai had planned to release its web3 game on the same day. It is possible that the incident was carried out by a hacker with good intentions who is currently in contact with the Super Sushi Samurai team. Unfortunately, the details remain unclear at this time.</p>
<p>According to CertiK, there was an incident where a user made a series of transactions involving a large number of SSS tokens. The user initially purchased 690 million SSS tokens and then transferred the entire balance to themselves.&nbsp;</p>
<p>They proceeded to double the balance 25 times, resulting in a final total of 11.5 trillion SSS tokens. These tokens were eventually sold for 1,310 ETH, which is equivalent to approximately $4,590,827.</p>
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">We have been exploited, it's mint related. We are still looking into the code. Tokens were minted and sold into the LP. <br>Transaction:<a href="https://t.co/F4XeqdyJu2" rel="noopener noreferrer nofollow" target="_blank">https://t.co/F4XeqdyJu2</a><br><br>the exploited funds are in this wallet: <a href="https://t.co/NWeTu5vMkj" rel="noopener noreferrer nofollow" target="_blank">https://t.co/NWeTu5vMkj</a></p>— Super Sushi Samurai | SSS (@SSS_HQ) <a href="https://twitter.com/SSS_HQ/status/1770836683426062397?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow" target="_blank">March 21, 2024</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
 </div>
</figure>
<p>Following the incident, the individual responsible for double-spending the tokens sent a message on the blockchain, stating:<em> “Hi team, this is a whitehat rescue hack. Let’s work on reimbursing the users. Please reach out via Blockscan chat from the SSS deployer 0x555b28f3b8b3b8ebd1b06997c2078fd94529f555 on Ethereum mainnet.”</em></p>
<p>Despite their apparent good intentions, it is important to highlight that the individual in question caused the SSS token to collapse by withdrawing $4.8 million in funds. Before the crash, SSS had a market capitalization of $27.75 million.&nbsp;</p>
<p>The tokens have experienced a significant decrease in value, losing over 99% of their initial worth. Shortly after, SSS developers replied: <em>“Hello, white hat; we have reached out to you on Blockscan. Thank you for cooperating with us. SSS Team.”</em></p>
<h2 class="wp-block-heading" id="a-disturbing-trend">A disturbing trend</h2>
<p>After the breach, Super Sushi Samurai has been actively communicating with its community, sharing updates and providing reassurances through its official Telegram channel and other social media platforms.</p>
<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter">
 <div class="wp-block-embed__wrapper">
  <blockquote class="twitter-tweet" data-width="550" data-dnt="true">
   <p lang="en" dir="ltr">1. Post-mortem:<br>The token contract has a bug where transferring your entire balance to yourself doubles it. h/t <a href="https://twitter.com/coffeexcoin?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow" target="_blank">@coffeexcoin</a> <br><br>2. Damage details:<br>total eth in pool before exploit: 1339.50 ETH<br>Whitehat: 1,310.04 ETH<br>Blackhat : 40.28 ETH<br>we remove LP and got: 29.09 ETH<br><br>3. Update:…</p>— Super Sushi Samurai | SSS (@SSS_HQ) <a href="https://twitter.com/SSS_HQ/status/1771054306520867242?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow" target="_blank">March 22, 2024</a>
  </blockquote>
  <script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
 </div>
</figure>
<p>The Super Sushi Samurai exploit is not an isolated incident within the Blast ecosystem. Last month, the Blast-based gambling project RiskOnBlast gained attention for reportedly deceiving investors.</p>
<p>The project mysteriously vanished after allegedly losing 420 ether, which is equivalent to $1.29 million, that was raised during a token presale. Over 750 victims experienced significant financial losses as the website and social media accounts vanished.</p>
<p>Despite the impressive $2.3 billion in deposits generated by Blast’s mainnet launch, its journey to success has been marred by security vulnerabilities and instances of exploitation. Blast currently holds a staggering $980 million in total value locked (TVL) at the moment.</p>
<p>Merely a month earlier, the ERC-X token Miner experienced a devastating crash of 99% due to the unearthing of a double-spending glitch, resulting in the endless creation of tokens. It’s unfortunate that the contract contains loopholes at a lower level. Transferring money to yourself can actually double your balance. The glitch resulted in significant user losses, totaling more than $10 million.</p>

Super Sushi Samurai exploited for $4.6M right before its launch

Table of Contents

Cryptopolitan_News

Other articles published on Mar 23, 2024

Analysts Favor KangaMoon Over Polkadot and Theta Network

Iceland Prime Minister Makes Statement on Bitcoin and BTC Mining

Bittime Prediksi Harga ETH Tembus US$5.000 Usai Manuver BlackRock

Memecoin Mania & Million Dollar Scams: The Price of Solana’s Success?

Shiba Inu vs PEPE Coin vs Bitgert Coin: The Ultimate Comparative Guide

Floki Inu roadmap reveals plans for regulated bank accounts

Join our free newsletter for daily crypto updates!