Super Sushi Samurai, a blockchain game on layer-2 solution Blast, recently experienced a significant exploit just hours before the launch of its highly anticipated gaming product. The exploit, supposedly carried out by a white hat hacker, resulted in a staggering $4.6 million loss due to a flaw in the smart contract code. This bug allowed an unauthorized party to trigger an infinite mint function, leading to the creation of an excessive number of tokens that were sold into the liquidity pool.
CertiK, an on-chain security firm, confirmed that $4.6 million worth of tokens were affected by this exploit. CoinGecko data indicated a 99% token value slippage following the unauthorized token dump. The attacker successfully obtained 1310 ETH from the token’s main liquidity pool by exploiting the vulnerability in the smart contract.
Investigations into the incident revealed that the unauthorized party acquired a whopping 690 million SSS tokens and conducted multiple transactions through an attack contract specifically designed for this purpose. By exploiting a flaw in the platform’s update function, the attacker managed to duplicate the tokens 25 times, inflating the quantity to 11.5 trillion, which were then exchanged for approximately 1,310 ETH.
In response to the breach, Super Sushi Samurai has been actively communicating with its community through its official Telegram channel and other social media platforms. They disclosed that the exploit was carried out by a white hat hacker who is currently collaborating with their team on the situation. The hacker has expressed intentions to reimburse affected users and has provided the address containing the compromised funds for tracking and potential recovery.
A “post-mortem” update from Super Sushi Samurai emphasized the ongoing negotiations to address the damage caused by the exploit. The team is working towards a resolution that protects both users and the white hat hacker involved in the incident, ensuring the safe return of funds. Discussions are underway to mitigate the impact of the exploit and prevent similar occurrences in the future.
The Super Sushi Samurai exploit serves as a reminder of the critical importance of robust security measures in the blockchain and cryptocurrency space. Despite the substantial financial loss, the proactive response from the project team and the collaborative efforts with the white hat hacker demonstrate a commitment to addressing the aftermath of the exploit responsibly. This incident highlights the need for continuous vigilance and diligence in safeguarding smart contracts and platforms against potential vulnerabilities.