SushiSwap Contract in Danger - Revoke Fast

[Gladitorcomeback]

Image Source link

SushiSwap a Decentralized exchange with AMM market which is Rank-35 according to Coinmarketcap has been exploited and more than 3.3 Millions has been lost already. Their Head Chef ask every users to revoke allowance who approved contract in last four days.

Source Link

Further Certik tweeted that multiple chains has been hacked and mentioned contract of each network which has been exploited

Affected contract addresses:
ETH: 0x044b7
BSC: 0xd75f
POLY: 0x5097
AVAX: 0xbace
FTM: 0x3e60

What to do now?
If you have used SushiSwap in last week than revoke your allowance. For this follow some sample step.

== Open revoke.cash
== Connect your wallet (select network which you used for swao etc)
== You will see all allowance you have given. search for SushiSwap and there will be revoke button next to SushiSwap.
== Just click in revoke and you will he charged small fee and now you are safe.

[Bitcoin_Arena]

Further Certik tweeted that multiple chains has been hacked and mentioned contract of each network which has been exploited

Affected contract addresses:
ETH: 0x044b7
BSC: 0xd75f
POLY: 0x5097
AVAX: 0xbace
FTM: 0x3e60

This what happens when chains are just copy-cats of the others, nothing much new in the code or how they operate. Just copy-paste. One chain gets an exploit and all the other will have the same problem.

Another important thing is to always use virgin address when interacting with smart contracts. Only what one wants to trade or exchange should be in the address and not the whole portfolio.

I hope the traders revoke the permissions fast enough before they become the next victims.

[PX-Z]

Here we go again, another episode of bugs from using smart contract alts that causes millions of lost funds from its users. One of the reasons why these alts will never replace bitcoin in any timeline.
I thought these smart contracts where double checked and audited.

[AnonBitCoiner]

Interesting to see that this exploits happen at the time when high number of Liquidity has been provided by LP Users. Arbitrum token has been recently launched and they Airdropped tokens to theirs community which attract many users to interect with dex in multiple chains andany users provided liquidity in arbitrum chain to collect fee because mumber if transaction become higher in this chain. This is not look incidental but its preplanned just like FTX exchange. Now the better option is for SushiSwap to refund or give Airdrop to those addresses which lost lot because of this exploit. I think 90% of these hacks are done by insiders. I might be wrong but its just my thinking.

I read News recently that total 1k Ethereum was affected in this exploit. 300 Ethereum has been refunded by Security team while 700 is still to be refunded. i surprised to see that Sushi Token is not affected so much. i remembered when Axie was hacked then Its token was down badly but here the situation was totally different. its down 5% and very quickly its recovered back to original price.

[Husires]

What would make a hacker try to hack centralized networks such as BSC? I think that money will be frozen and returned to the platform once the hack is confirmed?
The frequency of these attacks proves that all the mainframe bridges are either poorly programmed, or that the developers themselves are exploiting these vulnerabilities.

Affected contract addresses:
ETH: 0x044b7
BSC: 0xd75f
POLY: 0x5097
AVAX: 0xbace
FTM: 0x3e60

[Saisher]

Here we go again, another episode of bugs from using smart contract alts that causes millions of lost funds from its users. One of the reasons why these alts will never replace bitcoin in any timeline.
I thought these smart contracts where double checked and audited.

That's also what I believed,  if this keeps happening and investors are losing millions because of the bugs then all contract-based coins and tokens are in deep trouble in losing their reputation.
There's really no sound investment like Bitcoin if you know how to secure your private keys you are safe, compared to smart contracts that can be exploited so even if you have good security and you keep your private keys secure you can still be hacked.

[joniboini]

I read News recently that total 1k Ethereum was affected in this exploit. 300 Ethereum has been refunded by Security team while 700 is still to be refunded. i surprised to see that Sushi Token is not affected so much. i remembered when Axie was hacked then Its token was down badly but here the situation was totally different. its down 5% and very quickly its recovered back to original price.

Based on what I've read so far, the exploit is done on a contract that is not commonly used, and Sushi manages to compensate for the loss rather quickly. I guess the relatively low amount of loss also contributed to that. So, it is not surprising that the price was not affected that much. It is also understandable to assume there are some whales or traders who try to keep the price as high as possible though, anything is possible.

I don't think they will survive if exploits are happening so often though, they better improve the security or they will lose more than just 1k ETH in the future.

[Gladitorcomeback]

I thought these smart contracts where double checked and audited.

Their smart contracts has been audited by world top contract checker Certik and also Certik is the one who first aware of this exploit and tweeted about this in twitter. One contract exploit leads to all other. the hacker was smart enough to break security and got access to these contract despite of high security.

I don't think they will survive if exploits are happening so often though, they better improve the security or they will lose more than just 1k ETH in the future.

No doubt the survived this time but if another exploit happen then many traders will leave SushiSwap just like Solona. when first time Solona network bug was happen then its not affected Sol price but when its continued second and third time we have seen big crash in solona token price too. Every trader want safe, transparent and fast platform. If they failed, no one will believe in it.

[PX-Z]

I thought these smart contracts where double checked and audited.

Their smart contracts has been audited by world top contract checker Certik and also Certik is the one who first aware of this exploit and tweeted about this in twitter. One contract exploit leads to all other. the hacker was smart enough to break security and got access to these contract despite of high security.

Yeah, T'was "authentically" audited years after it was published only to find out that there's a loophole, not to mention its a major one. Damn it.
One of the reasons why cryptocurrency is still in its early stage particularly, smart contracts.

[albon]

No doubt the survived this time but if another exploit happen then many traders will leave SushiSwap just like Solona. when first time Solona network bug was happen then its not affected Sol price but when its continued second and third time we have seen big crash in solona token price too. Every trader want safe, transparent and fast platform. If they failed, no one will believe in it.

I completely agree with you; the mistakes that happened to Solana over and over again in the long term are what affected the current currency price, which has fallen a lot, and this indicates that investors are moving away from this currency, also what happened to SushiSwap platform and the bug that hackers exploited in the smart contract led to huge losses, but they tried to return things to their course, as they were able to recover part of the stolen money from the Ethereum currency, as this hacking also affected the SushiSwap (SUSHI) currency, but the effect was not great, but its price soon recovered, but yes, if more fatal bugs, hacking, and losses are repeated, exposing users’ funds to danger and theft, then yes the SUSHI coin will be uglier and worse than what happened to Solana coin, it will harm the coin holders and users of the SushiSwap platform.

[ScamViruS]

I thought these smart contracts where double checked and audited.

Their smart contracts has been audited by world top contract checker Certik and also Certik is the one who first aware of this exploit and tweeted about this in twitter. One contract exploit leads to all other. the hacker was smart enough to break security and got access to these contract despite of high security.

Yeah, T'was "authentically" audited years after it was published only to find out that there's a loophole, not to mention its a major one. Damn it.
One of the reasons why cryptocurrency is still in its early stage particularly, smart contracts.

Everything seems fine in crypto until something happens. This is happening all the time and people are losing their money. Neither project admits their failure, they're more interested in giving big explanations than saving their users money.

And most of these incidents happen through insiders, so now it is very important for all other users to be extra careful.

[ItsCrafty]

Their smart contracts has been audited by world top contract checker Certik and also Certik is the one who first aware of this exploit and tweeted about this in twitter. One contract exploit leads to all other. the hacker was smart enough to break security and got access to these contract despite of high security.

Not only Certik but there Contract has been checked many times by 2 another big anti hack companies including peckshield team,Blocksec and Quantstump. 100 Eth has been recovered by BlockSec and other 200 Eth by other company. This was an approval bug and  Hackers took advantage of it and success to break security. Security companies identify these bug very fast and Dex was lucky And was saved from great loss and recovery some Eth earlier. If their contract not audit by big companies there was chances if big loss.