BLAST L2 Game 'Super Samurai Sushi' Exploited for $4.6M

The new gaming token on the layer-2 network Blast, known as Super Sushi Samurai (SSS), has fallen victim to exploitation mere days after its debut, resulting in a staggering $4.6 million loss. The team revealed the incident on its X platform.

On March 17, the Super Sushi Samurai project was launched and its native token, SSS, was introduced. The project's vision included the launch of an engaging gaming experience today.

‍

The Exploit

However, Super Sushi Samurai's promise was shattered when an unidentified entity exploited a vulnerability within the smart contract's mint function. Seizing the opportunity, the exploiter manipulated the system to inject tokens directly into the SSS liquidity pool. 

This move triggered a catastrophic plunge in SSS's value, with CoinGecko reporting a staggering loss of over 99.2%. Blockchain security firm CertiK analyzed the breach and concluded that a total of $4.6 million was siphoned off by the exploiter.

‍

The Exploiter's Justification: A "White Hat Rescue" Hack?

As an unexpected twist, the exploiter justified their actions by framing it as a "white hat rescue" attempt. Contacting the Super Sushi Samurai team via a BlastScan message, they proposed collaborating to reimburse affected users. 

While chaos prevailed, Super Sushi Samurai initiated contact with the exploiter. The dialogues aim to navigate the aftermath of the breach and identify possible solutions. 

‍

A Disturbing Trend

The exploit of Super Sushi Samurai isn't an isolated incident within the Blast ecosystem. Just last month, the Blast-based gambling project RiskOnBlast made headlines for allegedly rug-pulling investors. 

The project vanished into thin air after purportedly disappearing with 420 ether, equivalent to $1.29 million, raised during a token presale. With its website and social media accounts disappearing, over 750 victims suffered substantial financial losses.

Although Blast's mainnet launch generated $2.3 billion in deposits, its rapid rise to prominence has been hindered by security vulnerabilities and exploitation cases. Blast has $980 million in total value locked (TVL) as of writing.