Some Funds Stolen in SushiSwap Exploit Recovered, but Blackhat Hackers Have the Rest

Funds recovered by whitehat security teams to be returned to users while others have been lost to blackhat hackers

article-image

Subbotina Anna/Shutterstock modified by Blockworks

share

SushiSwap is now safe to use after attackers drained more than $3 million last weekend, the blockchain protocol said Wednesday. It is now preparing to return some of the stolen funds to affected users, though not all are expected to recoup their losses quickly. 

Exploiters found an approval bug in SushiSwap’s Route Processor 2 last weekend, taking roughly $3.3 million from the smart contract. 

The majority of addresses that approved SushiSwap’s problematic smart contract were on Arbitrum and Polygon. The contract had been deployed on Arbitrum a few weeks ago for testing.

As part of the exploit, funds got swept by whitehat security teams while some were lost to blackhat hackers, the SushiSwap team said in a tweet. Those who haven’t used SushiSwap in the past 10 days were likely not impacted. 

The company said that user funds in the whitehat contract are safe and will be claimable shortly through a Merkle Claim contract and website the protocol is building. 

SushiSwap users whose funds are not in the whitehat contract must contact the protocol and share the transaction ID and blockchain data for the lost funds.

Loading Tweet..

“Blackhat funds will take longer to process, as the team will have to manually verify the legitimacy against on-chain data that validates the claim and then pay it out accordingly,” SushiSwap tweeted. 

The SushiSwap hack came after the number of crypto attacks spiked during the year’s first quarter, according to a report by Web3 security platform Immunefi. 

Various DeFi protocols that have become victims to such exploits have been able to successfully recover some or all of their stolen funds in recent months.

Scammers often try to trick DeFi users into granting them access to their funds — a method services such as Revok.cash seek to combat. Blockchain security firm PeckShield had urged SushiSwap users who had approved the relevant smart contract to immediately revoke its approval.


Get the news in your inbox. Explore Blockworks newsletters:

Tags

Decoding crypto and the markets. Daily, with Byron Gilliam.

Upcoming Events

Old Billingsgate

Mon - Wed, October 13 - 15, 2025

Blockworks’ Digital Asset Summit (DAS) will feature conversations between the builders, allocators, and legislators who will shape the trajectory of the digital asset ecosystem in the US and abroad.

Industry City | Brooklyn, NY

TUES - THURS, JUNE 24 - 26, 2025

Permissionless IV serves as the definitive gathering for crypto’s technical founders, developers, and builders to come together and create the future.If you’re ready to shape the future of crypto, Permissionless IV is where it happens.

Brooklyn, NY

SUN - MON, JUN. 22 - 23, 2025

Blockworks and Cracked Labs are teaming up for the third installment of the Permissionless Hackathon, happening June 22–23, 2025 in Brooklyn, NY. This is a 36-hour IRL builder sprint where developers, designers, and creatives ship real projects solving real problems across […]

recent research

Research Report Templates (19).png

Research

Suilend has grown into the top money market and liquid staking provider on Sui. STEAMM, Suilend’s Superfluid AMM, presents a compelling avenue for growing market share within Sui’s DEX landscape and revenue generation for the protocol. Suilend’s multi-product suite position it well for owning market share across key verticals. While current metrics across the Sui ecosystem are likely inflated due to Sui Foundation incentive programs, SEND trades at amongst the lowest multiples in the lend/borrow sector, suggesting that a bull case for continued growth in the ecosystem may be mispriced.

article-image

Silk Road founder Ulbricht made a triumphant return to the Bitcoin Conference, 10 years on from sentencing

article-image

A Blockworks Research report looked at who could take up some of the marketshare in the launchpad space

article-image

Business-to-business stablecoin payments are on the rise, per a report from Artemis, Dragonfly and Castle Island

article-image

Crypto continues to do its thing: incentivizing behavior

article-image

Kraken will soon offer Backed ‘xStocks’ as Solana tokens

article-image

In a unanimous decision, the US Court of International Trade has ruled that Trump’s IEEPA tariffs are unlawful