Game on Blast Drained of $4.6 Million, Token Price Plummets
Photo: Super Sushi Samurai
Super Sushi Samurai (SSS), the runner-up of the Big Bang Event on layer-2 Blast, has suffered a devastating attack with losses estimated at approximately $4.6 million.
The hack occurred just hours after the project announced an airdrop for early users. In an announcement on the evening of March 21, Super Sushi Samurai confirmed that a hacker had exploited a vulnerability in the mint function of their smart contract, subsequently dumping the tokens into the SSS liquidity pool.
We have been exploited, it's mint related. We are still looking into the code. Tokens were minted and sold into the LP.
— Super Sushi Samurai | SSS (@SSS_HQ) March 21, 2024
Transaction:https://t.co/F4XeqdyJu2
the exploited funds are in this wallet: https://t.co/NWeTu5vMkj
Coffeexcoin, a developer from Yuga Labs, explained that the liquidity pool was drained because the token contract had a flaw that allowed the doubling of funds. In simple terms, if a user transferred their entire balance to themselves in a single transaction, they could effectively double their initial amount.
The @SSS_HQ $SSS LP was just drained on blast because their token contract has a bug where transferring your entire balance to yourself doubles it.
— Coffee ☕️🍌 (@coffeexcoin) March 21, 2024
The order of operations decrements the balance for "from" and then sets the balance for "to" - if these are the same address, the… pic.twitter.com/RStMcFH3sy
According to blockchain security firm CertiK, the hack resulted in damages exceeding $4.6 million.
#CertiKInsight 🚨
— CertiK Alert (@CertiKAlert) March 21, 2024
A whitehat rescue was performed on SSS token on Blast saving $4.6m
Here is how the rescue was performed 👇
However, it might not have been a malicious attack. The individual who drained the project’s funds sent a message indicating this was a white-hat hack. He provided contact information and promised to return the funds to users.
"We are in contact with the attacker," confirmed Super Sushi Samurai on X (formerly Twitter).
Super Sushi Samurai is a game integrated with Telegram and Blast. The project had just released the SSS token on March 17 and was planning to launch its mainnet today. However, news of the hack has caused the SSS price to lose over 99% of its value.
Price Fluctuation of SSS on a 1-hour Chart, Screenshot from Tradingview at 01:45 AM on March 22, 2024
As for Blast, this layer-2 solution went live last month after attracting over $2.3 billion in TVL, quickly becoming the fourth-largest layer-2 in the entire sector.
