Leaderboard
401All-time rank
S
SushiSwap
Apr 10, 2023
$3.3M
Lost
$3.3M
Recovered
$3.3M
Net loss
$0
Full100% recovered
SushiSwap's RouteProcessor2 contract was exploited due to missing validation of route parameters across Ethereum, BSC, Arbitrum, and Optimism. 3M.
How the exploit worked
View reproducible PoCUnchecked User Input.
Lost: >$3.3M
Source: DeFiHackLabs (SunWeb3Sec)
- Target
- DeFi
- Classification
- Input Validation
- Technique
- Missing Input Validation
- Attribution
- Unknown
- Chains
EthereumArbitrumOptimismBSC
Event timeline
- Apr 10, 2023Exploit executed — $3.3M drained via missing input validation
- Attributed to Unknown
- Recovery status Full 100%
Data credits
- DefiLlamaIncident record, amounts, chains, recovery data and logo
- DeFiHackLabsExploit analysis and reproducible proof-of-concept (by SunWeb3Sec)