Swap

SushiSwap

April

Read

<p>SushiSwap has <a href="https://twitter.com/SushiSwap/status/1646032261257781248" rel="nofollow noopener" target="_blank">announced</a> a commitment to reimburse all affected users after being hacked over the weekend.</p>



<p>User funds were either &#8220;swept by whitehat security teams&#8221; or &#8220;lost to blackhat hackers,&#8221; according to the decentralized exchange. If the funds are in the whitehat contract, it signifies that the money was recovered by the security teams, and users will be able to get their hands on it. To transfer the recovered money to user wallets, SushiSwap will create a Merkle Claim contract.</p>



<figure class="wp-block-embed is-type-rich is-provider-twitter wp-block-embed-twitter"><div class="wp-block-embed__wrapper">
<blockquote class="twitter-tweet" data-width="550" data-dnt="true"><p lang="en" dir="ltr">🚨 RouteProcessor2 Exploit &amp; User Refund Update!<br><br>🧵 Read the below thread about: what&#39;s next for affected user funds and what processes we&#39;re setting up to return user funds.<br><br>🖥️ Firstly, please know that Sushi&#39;s Swap web app is safe to use now!<br><br>🪡👇🏼</p>&mdash; Sushi.com (@SushiSwap) <a href="https://twitter.com/SushiSwap/status/1646032261257781248?ref_src=twsrc%5Etfw" rel="nofollow noopener" target="_blank">April 12, 2023</a></blockquote><script async src="https://platform.twitter.com/widgets.js" charset="utf-8"></script>
</div></figure>



<p>However, users would have to wait longer for a refund if their funds are still tied to the Blackhat contract. This is due to the fact that each claim must be carefully examined by the decentralized exchange using on-chain data analysis before it can be paid out.</p>



<p>Users that did not contact the protocol within the last 10 days are probably not harmed by the attack, according to the decentralized exchange. Nonetheless, as a security precaution, the team advised users to double-check their permissions.</p>



<p>A RouterProcessor2 contract bug that was approve-related was used against SushiSwap on April 9. Assets belonging to users who approved the weak contract were taken, resulting in a <a href="https://www.cryptopolitan.com/sushiswap-loses-over-3-million-due-to-bug/?swcfpc=1">loss</a> of about $3.3 million overall.</p>



<h2 id="sushiswap-hack">SushiSwap hack</h2>



<p>Blockchain security firms CertiK Alert and Peckshield claim that the bug affected Sushi&#8217;s Routing Processor 2 contract&#8217;s approval function. This smart contract is in charge of gathering trade liquidity from various sources and figuring out the best price for exchanging coins.</p>



<p>Only individuals who had traded on the decentralized exchange over the previous four days were impacted by the vulnerability. Jared Grey, the chief developer of SushiSwap, advised users to remove rights for any contract on the protocol.&nbsp;</p>



<p>To solve the problem, a list of contracts requiring revocation was made on GitHub. A &#8220;significant amount of damaged funds&#8221; was quickly retrieved using a white hat security procedure after the event.</p>



<p>90 of the stolen <a href="https://www.cryptopolitan.com/ethereum-shanghai-upgrade-know-this/?swcfpc=1">ETH</a> were returned by one of the attackers, while BlockSec, a security company, retrieved another 100 ETH.</p>

SushiSwap announces strategy to reimburse user funds stolen in $3.3M hack

目录

Cryptopolitan_News

发布于 2023年4月12日的其他文章

Token price growth leaders in 30 days on STEM

$XRP Ledger Surpasses 79 Million Ledger Milestone, Bolstered by Increasing Adoption

Avalanche price analysis: AVAX Bulls rejects bearish action as the price recovers to $18.40

2 days ahead of Ethereum’s Shapella upgrade; What to expect?

Shibarium’s Puppynet Beats Expectations, Exceeds 2.2M Transactions

Ethereum Price Declines as the Imminent Shanghai Upgrade Nears

订阅我们免费的电子期刊，获取每日最新加密领域动态！