Leaderboard
1298All-time rank
SushiSwap logo

SushiSwap

Nov 30, 2020

$15K
Lost
$15K
Recovered
$0
Net loss
$15K
Unrecovered0% recovered

SushiMaker malicious-pool fee capture attack where an attacker created a malicious pool and redirected SushiSwap fees to it. The attacker captured approximately 15,000 USD in accumulated fees through access control vulnerabilities in the fee-distribution mechanism.

Target
DeFi
Classification
Access Control
Technique
Improper Access Control
Attribution
Unknown
Chains
Ethereum

Event timeline

  1. Nov 30, 2020
    Exploit executed — $15K drained via improper access control
  2. Attributed to Unknown
  3. Recovery status Unrecovered 0%

Data credits

Related incidents