Hackers hacked SushiSwap exchange, the amount of losses is $ 3.3 million

Data analysis showed that the stolen funds were those of users who had made transactions on SushiSwap over the past four days. The hack was caused by a bug in the RouterProcessor2 smart contract, and an official recommendation has been issued for the exchange’s customers — the developers advise to revoke all relevant permissions.

In short, the exploit is that when users approve a smart contract, they unwittingly allow the attacker to withdraw their tokens without their consent. The attack vector itself is a bug in the contract approval mechanism, which, by the way, works only in two networks — Polygon and Ethereum.

This problem is not the only one in a series of unpleasant events with SushiSwap recently. on March 21, the team announced that the US financial regulator had filed a lawsuit and that the developers were now cooperating with the SEC. No detailed information about the interaction was provided, as SushiSwap does not want to openly talk about the nature of the accusations and other issues related to the US Securities and Exchange Commission.