🚨 $SSS Incident & $4.5M "Bug Bounty" 🔍 TL;DR: @ThrusterFi users, breathe easy - you're unaffected. But the @SSS_HQ token contract's tax system? Exploited. Attackers doubled their balance by self-transacting, walking away with $4.5M in $SSS sales. 💼 How It Happened: 1. Double Trouble: Sending $SSS to your own address? Balance doubled. 2. Rinse & Repeat: 25x calls to SSS.transfer(address(this), SSS.balanceOf(address(this)) 3. Drain the Pool: Swapped 9 times, emptying the liquidity pool (LP), $4.5M in the "pocket: 🔎 Technical Breakdown: ➡️ L122: Recipient's balance gets a boost by adding the post-tax amount. The sender's balance hasn't been touched yet. ➡️ L124 vs. L125: First, they deducted from the sender. Then, they updated the recipient's balance without considering the deduction if the sender is the recipient. Swapping L124 with L122 would solve the issue. 🔗 Transaction: app.dedaub.com/blast/tx/0x80… ⚡️ High market cap projects, take note. This highlights the critical importance of thorough audits by reputable companies. ℹ️ It's not just about security; it's about safeguarding your community's trust and investment. Notes: Thanks to Fab from @Rareboard team for the explanation of the transaction. Also, for the safety of @Blast_L2 users: LP/Tocken Locker from @BlastVerseIO going live approximately next week. #Blast_L2 #SSS #Alert #Blast #SuperSushiSamurai

We're not sure what's going on with @Blast_L2 or @ThrusterFi. There's a lot of buys out of sudden, but problems with sells Dencun upgrade. We're waiting for them to fix these issues. It's not a problem with our contract. Community: t.me/BlastMoonIO

Account Suspension led to a brief panic sell. Good news: we're not into quick Pump'n'Dumps at BlastVerse. Our goal? To pioneer. We've got our own BuyBot and are working on Trending for it.