#scallop
scallop
95,671 vues
59 mentions
Populaire
Récents
Someone just stole $142K from $SUI 's Scallop with zero hacking skill.
No flash loan genius.
No oracle manipulation.
No code exploit.
Just... an old contract nobody was watching. 👀
Here's how it happened 👇
#scallop runs on #sui 💧
It has a rewards pool for sSUI stakers.
They upgraded their contracts a long time ago.
But the old V2?
Still sitting on-chain.
Still callable.
Forgotten — but not dead.
On #SUI🔥 , deployed contracts are immutable.
You can't delete them.
You can't turn them off.
They just... exist forever.
The attacker found the V2 from November 2023 — 17 months old — and called it directly.
No front end. No SDK. Direct contract call.
The bug was embarrassingly simple:
Every new staking account was supposed to record a last_index — the timestamp of when someone started.
In the old V2, this was never initialized.
So the contract assumed someone had been #staking since day one.
The spool index had been running for 20 months.
It hit 1.19 billion.
Attacker staked 136K sSUI.
Contract calculated 162 trillion reward points.
Pool had 150,000 SUI at a 1:1 rate.
One transaction. Everything gone.
Scallop froze the contract.
Covered 100% of losses.
Resumed in under 2 hours.
But here's what haunts me:
The attacker then reached out and offered to return 80% for a bounty.
Which means they weren't even trying to hide.
They walked in through the front door of an empty house nobody remembered they owned.
This isn't a "$SUI problem."
This is a #defi architecture problem.
How many old contracts are sitting on your favorite protocol right now?🫵
Audited once.
Upgraded.
Forgotten.
Still alive on-chain.
The scariest hacks aren't sophisticated.
They're patient.
No flash loan genius.
No oracle manipulation.
No code exploit.
Just... an old contract nobody was watching. 👀
Here's how it happened 👇
#scallop runs on #sui 💧
It has a rewards pool for sSUI stakers.
They upgraded their contracts a long time ago.
But the old V2?
Still sitting on-chain.
Still callable.
Forgotten — but not dead.
On #SUI🔥 , deployed contracts are immutable.
You can't delete them.
You can't turn them off.
They just... exist forever.
The attacker found the V2 from November 2023 — 17 months old — and called it directly.
No front end. No SDK. Direct contract call.
The bug was embarrassingly simple:
Every new staking account was supposed to record a last_index — the timestamp of when someone started.
In the old V2, this was never initialized.
So the contract assumed someone had been #staking since day one.
The spool index had been running for 20 months.
It hit 1.19 billion.
Attacker staked 136K sSUI.
Contract calculated 162 trillion reward points.
Pool had 150,000 SUI at a 1:1 rate.
One transaction. Everything gone.
Scallop froze the contract.
Covered 100% of losses.
Resumed in under 2 hours.
But here's what haunts me:
The attacker then reached out and offered to return 80% for a bounty.
Which means they weren't even trying to hide.
They walked in through the front door of an empty house nobody remembered they owned.
This isn't a "$SUI problem."
This is a #defi architecture problem.
How many old contracts are sitting on your favorite protocol right now?🫵
Audited once.
Upgraded.
Forgotten.
Still alive on-chain.
The scariest hacks aren't sophisticated.
They're patient.
🚨 ALERT: Scallop faced an exploit and lost 150,000 SUI.
The affected contract has been frozen and Scallop will cover 100% of the loss.#scallop #SUİ #news #NewsAboutCrypto
The affected contract has been frozen and Scallop will cover 100% of the loss.#scallop #SUİ #news #NewsAboutCrypto
🚨 DeFi Exploit Alert: 150K $SUI Stolen from Scallop Protocol
Even over the weekend, hackers remain highly active.
While the recent exploit on Kelp DAO—with losses nearing $300 million—has yet to be fully resolved, another incident has just surfaced.
➡️ This time: Scallop — one of the leading DeFi protocols on Sui
A vulnerability in a subsidiary contract مرتبط with the sSUI pool was exploited
Approximately 150,000 $SUI has been stolen
➡️ Response from the team
Scallop has announced they will fully compensate (100%) for all user losses
⚠️ Takeaway for DeFi farmers
Reassess your risk vs. reward
This phase of the market comes with increased exploit risks
Not every project will be able to cover losses like Scallop
👉 Stay cautious. Capital preservation matters more than chasing yield
$SUI #scallop
Even over the weekend, hackers remain highly active.
While the recent exploit on Kelp DAO—with losses nearing $300 million—has yet to be fully resolved, another incident has just surfaced.
➡️ This time: Scallop — one of the leading DeFi protocols on Sui
A vulnerability in a subsidiary contract مرتبط with the sSUI pool was exploited
Approximately 150,000 $SUI has been stolen
➡️ Response from the team
Scallop has announced they will fully compensate (100%) for all user losses
⚠️ Takeaway for DeFi farmers
Reassess your risk vs. reward
This phase of the market comes with increased exploit risks
Not every project will be able to cover losses like Scallop
👉 Stay cautious. Capital preservation matters more than chasing yield
$SUI #scallop
Scallop just got exploited for 150,000 SUI.
The vulnerability was in a deprecated rewards contract.
A contract the team already knew was old.
Here's the full read and why the response matters as much as the incident.
Deprecated contracts are the ghost infrastructure of DeFi.
They're old code. Replaced. Superseded.
But still sitting on-chain. Still executable. Still dangerous.
Scallop's team froze the module quickly.
Core funds confirmed unaffected.
Operations already resumed.
And they pledged to cover 100% of user losses.
That last part is rare. And it matters.
Most DeFi exploits follow a predictable script:
Hack occurs. Team goes quiet. Community panics.
Post-mortem published 3 days later. Partial refunds promised. Never fully delivered.
Scallop did the opposite.
Fast freeze. Full transparency. Complete coverage. Operations resumed.
That's not damage control. That's protocol maturity.
Now here's the broader lesson this exploit teaches again.
We flagged earlier this week that Anthropic's Mythos is raising alarms across DeFi security.
AI can now scan smart contracts for vulnerabilities faster than any human audit team.
The Scallop vulnerability wasn't in their active code.
It was in code they thought was harmless.
The most dangerous contracts in DeFi aren't the ones teams are watching.
They're the ones teams stopped watching.
Sui's stablecoin supply nearly tripled this year.
Its DeFi ecosystem is growing fast.
Fast growth and deprecated contracts are a combination the entire ecosystem needs to audit.
Scallop handled this right.
The question is who gets the next one before they do.
#Sui #DeFi #Scallop #Crypto #Security
The vulnerability was in a deprecated rewards contract.
A contract the team already knew was old.
Here's the full read and why the response matters as much as the incident.
Deprecated contracts are the ghost infrastructure of DeFi.
They're old code. Replaced. Superseded.
But still sitting on-chain. Still executable. Still dangerous.
Scallop's team froze the module quickly.
Core funds confirmed unaffected.
Operations already resumed.
And they pledged to cover 100% of user losses.
That last part is rare. And it matters.
Most DeFi exploits follow a predictable script:
Hack occurs. Team goes quiet. Community panics.
Post-mortem published 3 days later. Partial refunds promised. Never fully delivered.
Scallop did the opposite.
Fast freeze. Full transparency. Complete coverage. Operations resumed.
That's not damage control. That's protocol maturity.
Now here's the broader lesson this exploit teaches again.
We flagged earlier this week that Anthropic's Mythos is raising alarms across DeFi security.
AI can now scan smart contracts for vulnerabilities faster than any human audit team.
The Scallop vulnerability wasn't in their active code.
It was in code they thought was harmless.
The most dangerous contracts in DeFi aren't the ones teams are watching.
They're the ones teams stopped watching.
Sui's stablecoin supply nearly tripled this year.
Its DeFi ecosystem is growing fast.
Fast growth and deprecated contracts are a combination the entire ecosystem needs to audit.
Scallop handled this right.
The question is who gets the next one before they do.
#Sui #DeFi #Scallop #Crypto #Security
🚨 SCALLOP ON SUI EXPLOITED! HACKERS DRAIN FUNDS 🚨
💥 The Incident:
DeFi protocol Scallop on the SUI chain suffered a security breach 🥷💻
📉 The Damage:
Lost total of 150,000 SUI 💰❌
✅ THE GOOD NEWS:
Team officially confirmed FULL COVERAGE! 🛡️💸
ALL USER FUNDS WILL BE 100% REFUNDED ✅
They are taking full responsibility to protect the community! 🙏⚖️
#Scallop $SUI #Hack #Exploit #DeFi #Security
💥 The Incident:
DeFi protocol Scallop on the SUI chain suffered a security breach 🥷💻
📉 The Damage:
Lost total of 150,000 SUI 💰❌
✅ THE GOOD NEWS:
Team officially confirmed FULL COVERAGE! 🛡️💸
ALL USER FUNDS WILL BE 100% REFUNDED ✅
They are taking full responsibility to protect the community! 🙏⚖️
#Scallop $SUI #Hack #Exploit #DeFi #Security
🚨 BREAKING: Scallop Protocol hit by a flash loan exploit on the Sui Network. 📉
Details are emerging of a ~$142K drain targeting the sSUI reward pool via oracle price manipulation. The team has moved quickly to freeze the affected side contract and has committed to covering 100% of user losses to ensure no one is left out of pocket. 🛡️
While the core Scallop lending engine remains secure, this serves as a fresh reminder of the risks in complex DeFi reward structures.
Stay safe and keep an eye on your wallet permissions! 🕵️♂️ #SuiNetwork #Scallop #DeFi #BlockchainSecurity
$BTC
$SUI
$ETH
Details are emerging of a ~$142K drain targeting the sSUI reward pool via oracle price manipulation. The team has moved quickly to freeze the affected side contract and has committed to covering 100% of user losses to ensure no one is left out of pocket. 🛡️
While the core Scallop lending engine remains secure, this serves as a fresh reminder of the risks in complex DeFi reward structures.
Stay safe and keep an eye on your wallet permissions! 🕵️♂️ #SuiNetwork #Scallop #DeFi #BlockchainSecurity
$BTC
$SUI
$ETH
GIAO THỨC SCALLOP BỊ TẤN CÔNG: CAM KẾT ĐỀN BÙ 100% THIỆT HẠI 🏦🔐🛡️
Sự cố bảo mật: #scallop , giao thức cho vay (lending) hàng đầu trên hệ sinh thái Sui, vừa xác nhận một hợp đồng phụ liên quan đến nhóm phần thưởng sSUI đã bị hacker xâm nhập. Tổng thiệt hại ước tính khoảng 150.000 Sui. ⚠️💸
Khoanh vùng thiệt hại: Ngay sau khi phát hiện, #ScallopLend đã lập tức đóng băng hợp đồng bị ảnh hưởng. Đáng chú ý, hợp đồng chính và các nhóm tài sản khác hoàn toàn không bị tác động, đảm bảo an toàn cho phần lớn nguồn vốn của người dùng. 🧊🛡️
Trách nhiệm cao nhất: Đội ngũ phát triển Scallop đã đưa ra thông báo chính thức sẽ chịu hoàn toàn trách nhiệm về sự cố này. Họ cam kết sẽ đền bù mọi tổn thất cho những người dùng bị ảnh hưởng bởi lỗi bảo mật này. 🤝💎
Điều tra mở rộng: Hiện tại, giao thức đang phối hợp với các đơn vị bảo mật để điều tra sâu hơn về lỗ hổng và ngăn chặn các nguy cơ tương tự trong tương lai. 🕵️♂️🔍
Dù sự cố gây ra một chút lo ngại cho cộng đồng Sui, nhưng phản ứng nhanh chóng và cam kết đền bù từ Scallop đã giúp ổn định tâm lý nhà đầu tư, khẳng định uy tín của giao thức trong việc bảo vệ quyền lợi người dùng.
$SCA $SUI
Sự cố bảo mật: #scallop , giao thức cho vay (lending) hàng đầu trên hệ sinh thái Sui, vừa xác nhận một hợp đồng phụ liên quan đến nhóm phần thưởng sSUI đã bị hacker xâm nhập. Tổng thiệt hại ước tính khoảng 150.000 Sui. ⚠️💸
Khoanh vùng thiệt hại: Ngay sau khi phát hiện, #ScallopLend đã lập tức đóng băng hợp đồng bị ảnh hưởng. Đáng chú ý, hợp đồng chính và các nhóm tài sản khác hoàn toàn không bị tác động, đảm bảo an toàn cho phần lớn nguồn vốn của người dùng. 🧊🛡️
Trách nhiệm cao nhất: Đội ngũ phát triển Scallop đã đưa ra thông báo chính thức sẽ chịu hoàn toàn trách nhiệm về sự cố này. Họ cam kết sẽ đền bù mọi tổn thất cho những người dùng bị ảnh hưởng bởi lỗi bảo mật này. 🤝💎
Điều tra mở rộng: Hiện tại, giao thức đang phối hợp với các đơn vị bảo mật để điều tra sâu hơn về lỗ hổng và ngăn chặn các nguy cơ tương tự trong tương lai. 🕵️♂️🔍
Dù sự cố gây ra một chút lo ngại cho cộng đồng Sui, nhưng phản ứng nhanh chóng và cam kết đền bù từ Scallop đã giúp ổn định tâm lý nhà đầu tư, khẳng định uy tín của giao thức trong việc bảo vệ quyền lợi người dùng.
$SCA $SUI
Setelah mengidentifikasi adanya eksploitasi yang memengaruhi kontrak sampingan terkait kumpulan hadiah sSUI Scallop, yang mengakibatkan kerugian sekitar 150 ribu @Sui
Kontrak yang terkena dampak telah dibekukan. Kontrak inti kami tetap aman dan hanya kumpulan hadiah $SUI I yang terkena dampaknya. Semua kumpulan lainnya aman.
#Scallop akan menanggung 100% kerugian tersebut.
$SUI
Kontrak yang terkena dampak telah dibekukan. Kontrak inti kami tetap aman dan hanya kumpulan hadiah $SUI I yang terkena dampaknya. Semua kumpulan lainnya aman.
#Scallop akan menanggung 100% kerugian tersebut.
$SUI
$SCA #Scallop 🔥🔥💥💥🚀🚀🚀
50% 🆙 since last week
0.65$ to 1.06$ & counting 🆙
It’s moving slowly & steadily ⬆️ and
many will notice when it will touch the profit 🎯.
#CRIPTOHINDUSTAN #scallop #bitcoinhalving #Token2049 #BullorBear
50% 🆙 since last week
0.65$ to 1.06$ & counting 🆙
It’s moving slowly & steadily ⬆️ and
many will notice when it will touch the profit 🎯.
#CRIPTOHINDUSTAN #scallop #bitcoinhalving #Token2049 #BullorBear
$SCA #Scallop 💥💥🚀🚀🚀🚀
30% 🆙
0.65$ to 0.85$
Buy 🎯:- 0.65$ Filled (completed ✔️ ✅)
Now it’s good to Go for GREAT 👍 Uptrend RALLY 🔜.
IF NOT ADDED YET, BUY NOW.
Profit 🎯:- 2$ - 2.5$
Maximum 🎯:- 4$-5$
Easily all 🎯 will be achieved.
HUGE POTENTIAL COIN, MUST HAVE IN UR PORTFOLIO.
#CRIPTOHINDUSTAN #scallop #BullorBear #BinanceLaunchpool #FET
30% 🆙
0.65$ to 0.85$
Buy 🎯:- 0.65$ Filled (completed ✔️ ✅)
Now it’s good to Go for GREAT 👍 Uptrend RALLY 🔜.
IF NOT ADDED YET, BUY NOW.
Profit 🎯:- 2$ - 2.5$
Maximum 🎯:- 4$-5$
Easily all 🎯 will be achieved.
HUGE POTENTIAL COIN, MUST HAVE IN UR PORTFOLIO.
#CRIPTOHINDUSTAN #scallop #BullorBear #BinanceLaunchpool #FET
🔥 $SC is Back From the Brink! 🚀
$SC just defended a critical support level at 0.00134, and now it's eyeing a breakout! 💪 Buyers stepped in and crushed the selling pressure, creating a surprisingly stable structure. This isn’t just a bounce – it feels like smart money is quietly accumulating. Keep a close watch; a decisive move is brewing. 📈
#Scallop #CryptoRecovery #Altcoins #Accumulation 🐳
$SC just defended a critical support level at 0.00134, and now it's eyeing a breakout! 💪 Buyers stepped in and crushed the selling pressure, creating a surprisingly stable structure. This isn’t just a bounce – it feels like smart money is quietly accumulating. Keep a close watch; a decisive move is brewing. 📈
#Scallop #CryptoRecovery #Altcoins #Accumulation 🐳
$SCA #Scallop 💥💥🔥🔥🚀🚀🚀🔜
Ready for a blast 💥 🆙 rally 🔜
Great volume inflow after monthly close.
Buy 🎯:- Filled ✔️ ✅ at 0.55$
If u haven’t added yet, add NOW @0.6$
Profit 🎯 1️⃣ & 2️⃣ shown in 📈
🔜 mostly during this weekly candle close, RSI & candle will breakout for an 🆙 rally.
Close above 0.8$ will send it 🆙 & high
#CRIPTOHINDUSTAN #scallop #scamriskwarning #BNBCrossing660 #ETHETFsApproved
Ready for a blast 💥 🆙 rally 🔜
Great volume inflow after monthly close.
Buy 🎯:- Filled ✔️ ✅ at 0.55$
If u haven’t added yet, add NOW @0.6$
Profit 🎯 1️⃣ & 2️⃣ shown in 📈
🔜 mostly during this weekly candle close, RSI & candle will breakout for an 🆙 rally.
Close above 0.8$ will send it 🆙 & high
#CRIPTOHINDUSTAN #scallop #scamriskwarning #BNBCrossing660 #ETHETFsApproved
$SCA #Scallop 🔥🔥💥🚀🚀🚀🚀🚀
Ready for next rally 🆙 ⬆️
Will bottomed out around 0.5$ now at 0.58$
VOLUME STARTED FLOWING IN
RSI BREAKING OUT
Buy 🎯:- 0.5$—0.6$
Updated profit 🎯 1️⃣ & 2️⃣ in 📈.
Maximum 🎯:- 4$—5$
HUGE POTENTIAL COIN, MUST HAVE INNUR PORTFOLIO FOR UPCOMING SEASON.
#CRIPTOHINDUSTAN #scallop #altcoins #GME #Memecoins
Ready for next rally 🆙 ⬆️
Will bottomed out around 0.5$ now at 0.58$
VOLUME STARTED FLOWING IN
RSI BREAKING OUT
Buy 🎯:- 0.5$—0.6$
Updated profit 🎯 1️⃣ & 2️⃣ in 📈.
Maximum 🎯:- 4$—5$
HUGE POTENTIAL COIN, MUST HAVE INNUR PORTFOLIO FOR UPCOMING SEASON.
#CRIPTOHINDUSTAN #scallop #altcoins #GME #Memecoins
On December 14 that according to official news, #Sui Ecological Lending Protocol #Scallop will launch an #Airdrop event during Christmas from December 14 to 26.
Users only need to borrow at least $1,000 in assets/hold 1,000 veSCA to qualify for the airdrop. The total amount of airdrop is 1 million SCA, and the airdrop issuance date is December 26. Currently, Scallop #tvl has reached an all-time high of 195 million, and the total borrowing amount has reached 90 million US dollars.
#CryptoNews🚀🔥
Users only need to borrow at least $1,000 in assets/hold 1,000 veSCA to qualify for the airdrop. The total amount of airdrop is 1 million SCA, and the airdrop issuance date is December 26. Currently, Scallop #tvl has reached an all-time high of 195 million, and the total borrowing amount has reached 90 million US dollars.
#CryptoNews🚀🔥
🚀 Scallop تتقدم بخطوات قوية نحو المستقبل!
شارك Kris Lai، مؤسس ومدير Scallop، آخر التطورات والخطط القادمة للمنصة، مؤكدًا على الابتكارات الفريدة التي تميز Scallop في عالم التمويل اللامركزي (DeFi) على شبكة Sui.
💡 أبرز ما جاء في حديثه:
تطوير أدوات مالية ذكية تجعل تجربة المستخدم أسهل وأسرع.
تعزيز الشفافية والأمان في كل المعاملات.
خطط مستقبلية لجعل Scallop منصة لا غنى عنها لمجتمع DeFi.
✨ Scallop ليس مجرد منصة مالية، بل رحلة نحو مستقبل مبتكر يمزج بين التقنية والإبداع.
📌 إذا كنت مهتمًا بالتمويل اللامركزي أو تبحث عن فرصة لاكتشاف الجديد في عالم DeFi، هذا الوقت الأمثل لمتابعة Scallop عن قرب.
🔗 شارك رأيك 👇 وابقَ على اطلاع بكل جديد!
$SUI
#Scallop #defi #CryptoInnovation #SuiNetwork #BlockchainRevolution
شارك Kris Lai، مؤسس ومدير Scallop، آخر التطورات والخطط القادمة للمنصة، مؤكدًا على الابتكارات الفريدة التي تميز Scallop في عالم التمويل اللامركزي (DeFi) على شبكة Sui.
💡 أبرز ما جاء في حديثه:
تطوير أدوات مالية ذكية تجعل تجربة المستخدم أسهل وأسرع.
تعزيز الشفافية والأمان في كل المعاملات.
خطط مستقبلية لجعل Scallop منصة لا غنى عنها لمجتمع DeFi.
✨ Scallop ليس مجرد منصة مالية، بل رحلة نحو مستقبل مبتكر يمزج بين التقنية والإبداع.
📌 إذا كنت مهتمًا بالتمويل اللامركزي أو تبحث عن فرصة لاكتشاف الجديد في عالم DeFi، هذا الوقت الأمثل لمتابعة Scallop عن قرب.
🔗 شارك رأيك 👇 وابقَ على اطلاع بكل جديد!
$SUI
#Scallop #defi #CryptoInnovation #SuiNetwork #BlockchainRevolution
Connectez-vous pour découvrir d’autres contenus