Share this article

Newly Issued Gaming Token Exploited on Blast With $4.6M Drained

The hacker attempted to contact the SSS team, stating their intention to reimburse users.

Updated Mar 21, 2024, 4:30 p.m. Published Mar 21, 2024, 4:02 p.m.
(Kevin Ku/Unsplash)
(Kevin Ku/Unsplash)
  • A total of $4.6 million was lost, according to CertiK.
  • The exploit was related to the smart contract's mint function.
  • The token lost more than 99% of its value.

A gaming token on layer-2 network Blast has been exploited with $4.6 million stolen less than a week after its introduction, according to an announcement in the token's Telegram channel.

The project, named Super Sushi Samurai, released the SSS token on March 17 and had planned to start offering the game today.

STORY CONTINUES BELOW
Don't miss another story.Subscribe to the Crypto Daybook Americas Newsletter today. See all newsletters

An unknown entity exploited a vulnerability in the smart contract's mint function before selling tokens directly into the SSS liquidity pool. SSS lost more than 99% of its value after sale, according to CoinGecko. Blockchain security firm CertiK said that a total of $4.6 million was affected by the exploit.

"We have been exploited, it's mint related. We are still looking into the code. Tokens were minted and sold into the LP," the team wrote on Telegram.

The exploiter attempted to contact the team, describing the event as a "white hat rescue" hack, in a BlastScan message. "Let's work on reimbursing users," they said.

"We are in touch with the exploiter," the Super Sushi Samurai team wrote on X.

Yuga Labs developer coffeexcoin wrote that the liquidity pool, a fundamental component of decentralized finance, was drained because "their token contract has a bug where transferring your entire balance to yourself doubles it."

The Blast mainnet went live last month after receiving $2.3 billion in deposits, rapidly becoming the fourth-largest layer-2 network, with $1 billion in total value locked (TVL), DefiLlama data shows. The largest, Arbitrum One, has $4 billion TVL, according to CoinGecko data.

UPDATE (March 21, 16:30 UTC):Adds quotes from Super Sushi Samurai team and coffeexcoin, tweet from the latter.

More For You

Protocol Research: GoPlus Security

GP Basic Image

What to know:

  • As of October 2025, GoPlus has generated $4.7M in total revenue across its product lines. The GoPlus App is the primary revenue driver, contributing $2.5M (approx. 53%), followed by the SafeToken Protocol at $1.7M.
  • GoPlus Intelligence's Token Security API averaged 717 million monthly calls year-to-date in 2025 , with a peak of nearly 1 billion calls in February 2025. Total blockchain-level requests, including transaction simulations, averaged an additional 350 million per month.
  • Since its January 2025 launch , the $GPS token has registered over $5B in total spot volume and $10B in derivatives volume in 2025. Monthly spot volume peaked in March 2025 at over $1.1B , while derivatives volume peaked the same month at over $4B.

More For You

French Banking Giant BPCE to Roll Out Crypto Trading for 2M Retail Clients

(CoinDesk)

The service will allow customers to buy and sell BTC, ETH, SOL, and USDC through a separate digital asset account managed by Hexarq.

What to know:

  • French banking group BPCE will start offering crypto trading services to 2 million retail customers through its Banque Populaire and Caisse d’Épargne apps, with plans to expand to 12 million customers by 2026.
  • The service will allow customers to buy and sell BTC, ETH, SOL, and USDC through a separate digital asset account managed by Hexarq, with a €2.99 monthly fee and 1.5% transaction commission.
  • The move follows similar initiatives by other European banks, such as BBVA, Santander, and Raiffeisen Bank, which have already started offering crypto trading services to their customers.