Super Sushi Samurai Token has crashed 99% due to double spend crash
Super Sushi Samurai (SSS), a GameFi project built on Coinbase's Base Layer-2 blockchain and Telegram messaging app, has seen a self-proclaimed white-hat hacker withdraw $4.8 million from its liquidity pools. Cost problem.
In a statement to Cointelegraph, blockchain analytics firm Certike said, “The vulnerability at [SSS] The contract's _update() function does not properly update scales when passed to self. Therefore, when a user transfers the entire SSS tokens to themselves, the resulting balance is doubled.
@SSS_HQ's $SSS LP was only released with a bang because their token contract has a bug where transferring your entire account to yourself doubles.
The order of operations will descale for “from” and descale for “to” – if these are the same addresses, the… pic.twitter.com/RStMcFH3sy
— Coffee ☕️ (@coffeexcoin) March 21, 2024
During the CertiK crash, one user 0x786C8f95C17BB990a040dc4D6539B01FC1b72842 bought 690 million SSS tokens, transferred the rest entirely to themselves, increased it 25 times and finally sold it for 5 SS. 1,310 ETH (~$4,590,827).”
Shortly after the incident, the user who doubled his tokens said in a blockchain message:
“Hello team, this is White Hack Rescue. Let's compensate consumers. Please contact blockscan chat with SSS deployer 0x555b28f3b8b3b8ebd1b06997c2078fd94529f555 on Ethereum mainnet.
However, it should be noted that despite their goodwill, a self-proclaimed white hat caused the collapse of the SSS token after raising $4.8 million in funding. Before the collapse, SSS had a total market cap of $27.75 million. The tokens have lost more than 99% of their value. On the same day, the SSS developers responded:
“Hello, White Hat; we've met you at Blockscan. Thanks for joining us. The SSS team.
A month ago, the novel ERC-X token miner crashed by 99% after a user discovered a double-spending problem that led to an infinite generation of tokens. “It is unfortunate that the contract has low gaps. You can double your balance by transferring money to yourself,” Yu Xian, co-founder of Singaporean blockchain security firm SlowMist, said of the event. The problem cost users more than $10 million.
RELATED: KyberSwap Attacker Uses ‘Unlimited Cash Crisis' To Invest Funds – DeFi Expert
