The Ethereum-based decentralized exchange indicated on Twitter today that users that were affected by the protocol’s attack last weekend would be able to recover their funds.

SushiSwap is a decentralized finance project that enables its users to trade cryptocurrencies without needing to rely on a third party. On April 9, a fault in the protocol’s RouteProcessor2 smart contract allowed an exploiter to siphon tokens from users who’d previously approved the faulty contract. 

It’s currently unclear how much was actually taken, as groups of white hat hackers quickly mobilized to pre-emptively siphon user funds in order to secure them from malicious parties. However, the attacker was able to steal at least 1,800 ETH (worth over $3.3 million at the time of the exploit) from a single SushiSwap user. 

According to SushiSwap, the faulty smart contract was only deployed “in the last ten days”, meaning that users that hadn’t interacted with the protocol since April 2 were not impacted by the exploit. The exchange’s team highly encouraged users to revoke protocol approvals in any case, as a “good security practice.”

(by Tom Carreras)