
A significant security breach occurred on the layer-2 network Blast, involving the gaming token $SSS from the game Super Sushi Samurai. The exploit resulted in a loss of approximately $4.6 million (1310 ETH) due to a double-spending flaw in the token contract, which allowed users to double their balance by transferring funds to themselves. The attacker, later identified as a white-hat hacker, exploited this vulnerability, leading to a near-total value loss of the $SSS token, with its price dropping more than 99.9%. The exploit involved the attacker holding 3200% of the supply, indicating a mint exploit. The Super Sushi Samurai team has been in negotiations with the hacker for the return of the stolen funds. In response to the incident, the team announced a post-mortem revealing the bug and stated that the funds are safe. They have decided to reward the white-hat hacker with a 5% bounty in ETH for rescuing user funds, with the remaining funds to be transferred to a multisig address under the team's control.











While you were busy playing with your food, someone stole your lunch. Blast L2-based game Super Sushi Samurai's (@SSS_HQ) LP drained $4.8m in contract bug exploit shortly after its launch, and the price dropped 99.9%. Rekt investigates. https://t.co/gSg3RBLHtf
Super Sushi Samurai exploited by whitehat for $4.6 million March 21, 2024 https://t.co/yJpfs7E1JQ https://t.co/B0j8YXv5Kv
Here’s another #ImmunefiAnalysis for one of the hacks in early 2024: On Jan 13, 2024, @Wise_Token was exploited for 178 ETH ($466k). This is a novel attack vector, in which the attacker used the protocol's own rounding logic to manipulate share price and incur bad debt. https://t.co/WhFh3dPvKZ