An unknown entity has exploited a Telegram-based game that runs on the newly launched Ethereum (ETH) layer-2 scaling solution Blast Network.
In a post on social media platform X, the team behind the game Super Sushi Samurai (SSS) says token transfers are paused after an attacker exploited a vulnerability that allows exploiters to double their tokens by transferring their holdings to themselves.
“We have been exploited, it’s mint related. We are still looking into the code. Tokens were minted and sold into the LP.”
According to security firm CertiK, $4.6 million worth of tokens were affected by the attack. It turns out though that the incident is a white hat rescue.
In a white hat rescue, the hacker exploits a protocol to show that the project has a vulnerability. SSS says it has already communicated with the exploiter.
“We’re working with the white hat on the safe return of funds. An update and post-mortem will follow.”
Blast, which launched its mainnet a few weeks earlier, has also been facing criticism from the crypto community. In November, Polygon Labs developer relations engineer Jarrod Watts warned about the risks of the platform.
“By sending money to the Blast contract, you’re basically trusting 3-5 strangers to stake your funds for you. You won’t be able to withdraw that money at any point in time unless those 3-5 people decide to do the right thing in the future. Again, there’s no bridge here.”
Don't Miss a Beat – Subscribe to get email alerts delivered directly to your inboxGenerated Image: Midjourney