Sonic ICP

Sonic DEX, a decentralized exchange on Internet Computer, suffered an exploit involving transaction atomicity failures during asynchronous canister execution. The attacker submitted coordinated, high-frequency requests that exploited race conditions during intermediate state transitions, allowing unauthorized withdrawals before the protocol completed reconciliation.

The attack affected 26 liquidity pools and resulted in approximately $276,000 in losses. Sonic paused the protocol and began implementing changes to prevent similar state inconsistencies.