Scallop, a Sui-based lending protocol, lost 150,000 SUI after an attacker exploited an uninitialized variable in a deprecated rewards contract to claim nearly two years of backdated rewards. The protocol has frozen the affected contract and pledged to fully reimburse users from its treasury.

****
#cybersecurity #infosec #incident #theft
https://beyondmachines.net/event_details/scallop-protocol-drained-of-150000-sui-via-deprecated-contract-exploit-w-o-k-0-m/gD2P6Ple2L