SushiSwap approval flaw results in $3.3 million in exploitation

Apparently, only individuals who have transacted on the SushiSwap decentralized exchange within the past four days are affected.

Several Twitter security reports indicate that a flaw in a smart contract on the decentralized finance (DeFi) protocol SushiSwap caused over $3 million in losses in the early hours of April 9.

Blockchain security firms Certik Alert and Peckshield reported a peculiar occurrence involving the approval function of Sushi’s Router Processor 2 contract — a smart contract that aggregates trade liquidity from multiple sources and determines the most advantageous price for exchanging currencies. Within a few hours, the flaw caused $3.3 million in losses.

According to DefiLlama developer 0xngmi, the breach should only affect users who switched the protocol within the last four days.

Jared Grey, the chief developer of Sushi, implored users to revoke permissions for every contract on the protocol. “The RouteProcessor2 contract for Sushi has an approval flaw; please revoke approval immediately. We are collaborating with security teams to address the issue,” he noted. To address the issue, a catalog of contracts on GitHub with various blockchains necessitating revocation has been compiled.

Grey took to Twitter hours after the incident to declare that a “significant portion of affected funds” had been recovered through a whitehat security process.

“We have verified the recovery of over 300 ETH of Sifu’s misappropriated funds from CoffeeBabe. We are in contact with Lido’s personnel about 700 additional ETH.”

The community of The Sushi has had an intense weekend. On April 8, Grey and his attorney commented on the recent order issued by the Securities and Exchange Commission of the United States.

Read Also: Indian Man Tried to Jump Off a Bridge After Cryptocurrency Losses

Disclaimer: The information provided in this article is for informational purposes only and should not be construed as financial or investment advice. Cryptocurrency investments are subject to market risks, and individuals should seek professional advice before making any investment decisions.

- Advertisement -

Comments are closed.