The team behind a Telegram-based game said Thursday that it is working with an apparent white hat hacker to return funds to users after $4.6 million worth of tokens was stolen due to an exploit.
The hacker hit the newly launched game Super Sushi Samurai, which minted its tokens on Ethereum scaling network Blast. The price of its native token, SSS, plunged to a tiny fraction of a penny on the reports of the hack, which exploited a token transfer bug within the smart contract that powers the game.
A pseudonymous Yuga Labs smart contract developer who goes by the name Coffee said on Twitter (aka X) that the bug allowed exploiters to boost their holdings. “Transferring your entire balance to yourself doubles it,” they wrote.
Security firm CertiK spotted the exploit and said on Twitter that it was a white hat rescue. White hat rescues are when a protocol is exploited by a hacker in order to show those behind the project that they have a vulnerability. The noble exploiter then is typically rewarded and allowed to keep a share of the swiped funds.
“We’re working with the white hat on the safe return of funds,” Super Sushi Samurai said on X/Twitter hours after the hack. “An update and postmortem will follow.” The team behind the game did not immediately respond to Decrypt’s questions.
Cielo.Finance, which tracks blockchain data, told Decrypt that SSS tokens were snapped up after the hack. Traders will often do that in case a white hack returns funds and the price of the tokens then rises.
We're working with the white hat on the safe return of funds. An update and post-mortem will follow.
Super Sushi Samurai is a simple “idle” game that runs within the instant messaging platform, Telegram—much like Notcoin, a recent crypto gaming sensation. Currently limited to players who have an access code, Super Sushi Samurai sees players' cartoonish warriors fight foes to earn token rewards, plus there are NFT land plots that play into "megawar" battles between clans.
I wasn’t expecting to enjoy Notcoin. To be honest, I was pretty dismissive at first. You tap an image of a coin on your mobile device, earn an in-game currency for each tap, and are bound by an energy bar that depletes as you tap (and refills when idle). And in the end, you'll be entitled to an airdrop of an upcoming token based on your tapping abilities.
It sounded pretty dull. So imagine my surprise that three weeks after trying the game for the first time, I’m still opening it up every mornin...
It runs on Ethereum layer-2 network Blast, a scaling network which aims to make it quicker and cheaper for people to do things on the sometimes slow and costly mainnet. Blast just launched its mainnet on February 29, but already faced a significant technical hurdle last week when it briefly stopped producing blocks following the Ethereum network's Dencun upgrade.
SatLayer, a Bitcoin restaking platform, announced Wednesday it’s extending Bitcoin’s use in decentralized finance to Sui, the speedy layer-1 blockchain launched last year.
With Sui’s focus on fast transaction speeds, SatLayer’s integration will enable developers to leverage Bitcoin’s $2.1 trillion footprint in building DeFi applications, which aim to exclude third parties from transactions in areas like trading and lending, SatLayer said in a statement.
Sui’s network is already home to a budding...
It's been a big week of DeFi news for the Donald Trump-backed crypto venture, World Liberty Financial (WLFI). Earlier this week, the project expanded its portfolio with $5 million worth of investment in three major assets: Ethereum (ETH), Chainlink (LINK), and Aave (AAVE).
The acquisitions include 2,631 ETH at $3,801 each, 41,335 LINK at $24.2, and 3,357 AAVE at $297.8, according to on-chain analytics platform Lookonchain.
The purchases mark WLFI’s first foray into LINK and AAVE, diversifying it...
Crypto yield marketplace Superform announced Wednesday the launch of SuperUSDC, a product billed as a “set and forget” opportunity for earning high yield on Circle’s stablecoin.
Since its launch in early access this year, the platform has functioned as a decentralized marketplace for yield protocols. Projects can list vaults on Superform, which are linked to yield opportunities on Ethereum as well as dedicated scaling solutions like Arbitrum or Base.
SuperUSDC offers DeFi users “automated, non...