SushiSwap hacked, Head Chef says 'revoke all chains' Decentral | CryptoExplorer ✪

SushiSwap hacked, Head Chef says 'revoke all chains'
Decentralized exchange SushiSwap has fallen victim to an exploit, which led to the loss of more than $3.3 million from at least one user, known as 0xSifu on Twitter. The exploit involves an approve-related bug on the RouterProcessor2 contract — which PeckShield and SushiSwap Head Chef Jared Grey recommend revoking on all chains. The root cause, according to Ancilia, Inc. and in technical terms, "is because in the internal swap() function, it will call swapUniV3() to set variable "lastCalledPool" which is at storage slot 0x00." The cybersecurity account adds that "later on in the swap3callback function, the permission check gets bypassed." Read more