Bitget App
Trade smarter
Buy cryptoMarketsTradeFuturesEarnWeb3SquareMore
Trade
Spot
Buy and sell crypto with ease
Margin
Amplify your capital and maximize fund efficiency
Onchain
Going Onchain, without going Onchain!
Convert & block trade
Convert crypto with one click and zero fees
Explore
Launchhub
Gain the edge early and start winning
Copy
Copy elite trader with one click
Bots
Simple, fast, and reliable AI trading bot
Trade
USDT-M Futures
Futures settled in USDT
USDC-M Futures
Futures settled in USDC
Coin-M Futures
Futures settled in cryptocurrencies
Explore
Futures guide
A beginner-to-advanced journey in futures trading
Futures promotions
Generous rewards await
Overview
A variety of products to grow your assets
Simple Earn
Deposit and withdraw anytime to earn flexible returns with zero risk
On-chain Earn
Earn profits daily without risking principal
Structured Earn
Robust financial innovation to navigate market swings
VIP and Wealth Management
Premium services for smart wealth management
Loans
Flexible borrowing with high fund security
Telegram game Super Sushi Samurai's LP wallets drained for $4.6 million as bug let users double their own funds

Telegram game Super Sushi Samurai's LP wallets drained for $4.6 million as bug let users double their own funds

The BlockThe Block2024/03/21 17:26
By:The Block

Quick Take A Telegram game called Super Sushi Samurai saw its LP wallets drained for $4.6 million due to a bug. The bug allowed any user to send all of their funds back to themselves — which would double them.

Telegram game Super Sushi Samurai's LP wallets drained for $4.6 million as bug let users double their own funds image 0

An idle Telegram game called Super Sushi Samurai saw its liquidity provider wallets drained for $4.6 million due to a bug that let users double their own funds.

"We have been exploited, it's mint related. We are still looking into the code. Tokens were minted and sold into the LP," said the project's official X account .

A Yuga Labs smart contract developer known as Coffee noted that the token contract had a bug . If a user transferred the entire balance of their wallet to themselves, it would double their funds.

It seems the attacker did exactly this and then used the funds to drain the liquidity on decentralized exchanges. The attacker sold the newly minted tokens for 1,310 wrapped ether, worth $4.6 million at current prices.

However, the funds may not entirely be lost. The person who drained the funds sent a message saying that it was a whitehat rescue hack. They provided details for contacting them and said that users should get reimbursed. The project said it had reached out to the exploiter.

The game is played through Telegram and runs on the Blast network. Rewards are generated from a combination of a trading tax, an onchain transaction fee rebate from Blast and through yield generated from ether in the LP pool.


0

Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.

PoolX: Earn new token airdrops
Lock your assets and earn 10%+ APR
Lock now!

You may also like

New spot margin trading pair — BARD/USDT!

Bitget Announcement2025/09/19 07:28

BTC/ETH VIP Earn Ultimate Carnival is officially here!

Bitget Announcement2025/09/18 07:12

New spot margin trading pair — FLOCK/USDT!

Bitget Announcement2025/09/18 06:55

0GUSDT now launched for pre-market futures trading

Bitget Announcement2025/09/18 05:39