Scallop freezes sSUI spool rewards contract after ~150K SUI exploit; core lending unaffected
๐/@Scallop_io โข
Revision history
3 recorded changes
Want your article here?
Promote with Leviathan NewsScallop disclosed an exploit hitting a side contract tied to its sSUI spool rewards pool, with roughly 150K SUI drained before the team froze the affected contract. Core lending contracts on the Sui-based money market are untouched, so deposits and active loans remain intact. The attack vector was scoped to the rewards-distribution logic rather than the main protocol, meaning the damage is contained but user rewards took the hit.
TLDR by @Benthic
More coverage
- Scallop Exploit Drains 150K SUI From Deprecated Rewards Contract (ourcryptotalk.com)
- Scallop Exploit Drains 150K SUI Through Deprecated Contract As ... (mexc.com)
- Scallop Loses 150,000 SUI in sSUI Reward Pool Exploit - Phemex (phemex.com)
- Another DeFi attack drains 150k SUI from obsolete Scallop contract (binance.com)
- Scallop Loses $142K in Flash Loan Attack on Deprecated Contract (cryptotimes.io)
Explore the topic
More on Exploit
Moke Token and LpdFi lose $1.6M to exploits manipulating live PancakeSwap reserves
Blocksec ยท
Ravencoin faces four-day rollback as 2Miners and RavenMiner rebuild chain after consensus exploit; $RVN drops 17%
Coindesk ยท
OpenAI expands Daybreak with GPT-5.6-Cyber, a specialized model for authorized vulnerability research, exploit validation and advanced cyber defense
๐/@Eric_Wallace_ ยท
BTCPay Server offers up to $190K bounty after exploit drains merchant Bitcoin wallets, with attackers using stolen LND credentials to access Lightning funds
Coindesk ยท
BTCPay Server warns active exploit can drain LND wallets, urges immediate update to v2.4.2
๐/@BtcpayServer ยท
Blockaid says Coldcard's $111M+ exploit exposes crypto's "original sin" as private keys remain a single point of failure despite offline hardware wallet security
The Block ยท
Moke Token and LpdFi lose $1.6M to exploits manipulating live PancakeSwap reserves
Blocksec ยท
Ravencoin faces four-day rollback as 2Miners and RavenMiner rebuild chain after consensus exploit; $RVN drops 17%
Coindesk ยท
OpenAI expands Daybreak with GPT-5.6-Cyber, a specialized model for authorized vulnerability research, exploit validation and advanced cyber defense
๐/@Eric_Wallace_ ยท
BTCPay Server offers up to $190K bounty after exploit drains merchant Bitcoin wallets, with attackers using stolen LND credentials to access Lightning funds
Coindesk ยท
BTCPay Server warns active exploit can drain LND wallets, urges immediate update to v2.4.2
๐/@BtcpayServer ยท
Blockaid says Coldcard's $111M+ exploit exposes crypto's "original sin" as private keys remain a single point of failure despite offline hardware wallet security
The Block ยท