Telegram game Super Sushi Samurai's LP wallets drained for $4.6 million as bug let users double their own funds
Quick Take
- A Telegram game called Super Sushi Samurai saw its LP wallets drained for $4.6 million due to a bug.
- The bug allowed any user to send all of their funds back to themselves — which would double them.
An idle Telegram game called Super Sushi Samurai saw its liquidity provider wallets drained for $4.6 million due to a bug that let users double their own funds.
"We have been exploited, it's mint related. We are still looking into the code. Tokens were minted and sold into the LP," said the project's official X account.
A Yuga Labs smart contract developer known as Coffee noted that the token contract had a bug. If a user transferred the entire balance of their wallet to themselves, it would double their funds.
It seems the attacker did exactly this and then used the funds to drain the liquidity on decentralized exchanges. The attacker sold the newly minted tokens for 1,310 wrapped ether, worth $4.6 million at current prices.
However, the funds may not entirely be lost. The person who drained the funds sent a message saying that it was a whitehat rescue hack. They provided details for contacting them and said that users should get reimbursed. The project said it had reached out to the exploiter.
The game is played through Telegram and runs on the Blast network. Rewards are generated from a combination of a trading tax, an onchain transaction fee rebate from Blast and through yield generated from ether in the LP pool.
Disclaimer: The Block is an independent media outlet that delivers news, research, and data. As of November 2023, Foresight Ventures is a majority investor of The Block. Foresight Ventures invests in other companies in the crypto space. Crypto exchange Bitget is an anchor LP for Foresight Ventures. The Block continues to operate independently to deliver objective, impactful, and timely information about the crypto industry. Here are our current financial disclosures.
© 2023 The Block. All Rights Reserved. This article is provided for informational purposes only. It is not offered or intended to be used as legal, tax, investment, financial, or other advice.
