#scallop
scallop
94,696 views
59 Discussing
Hot
Latest
Someone just stole $142K from $SUI 's Scallop with zero hacking skill.
No flash loan genius.
No oracle manipulation.
No code exploit.
Just... an old contract nobody was watching. 👀
Here's how it happened 👇
#scallop runs on #sui 💧
It has a rewards pool for sSUI stakers.
They upgraded their contracts a long time ago.
But the old V2?
Still sitting on-chain.
Still callable.
Forgotten — but not dead.
On #SUI🔥 , deployed contracts are immutable.
You can't delete them.
You can't turn them off.
They just... exist forever.
The attacker found the V2 from November 2023 — 17 months old — and called it directly.
No front end. No SDK. Direct contract call.
The bug was embarrassingly simple:
Every new staking account was supposed to record a last_index — the timestamp of when someone started.
In the old V2, this was never initialized.
So the contract assumed someone had been #staking since day one.
The spool index had been running for 20 months.
It hit 1.19 billion.
Attacker staked 136K sSUI.
Contract calculated 162 trillion reward points.
Pool had 150,000 SUI at a 1:1 rate.
One transaction. Everything gone.
Scallop froze the contract.
Covered 100% of losses.
Resumed in under 2 hours.
But here's what haunts me:
The attacker then reached out and offered to return 80% for a bounty.
Which means they weren't even trying to hide.
They walked in through the front door of an empty house nobody remembered they owned.
This isn't a "$SUI problem."
This is a #defi architecture problem.
How many old contracts are sitting on your favorite protocol right now?🫵
Audited once.
Upgraded.
Forgotten.
Still alive on-chain.
The scariest hacks aren't sophisticated.
They're patient.
No flash loan genius.
No oracle manipulation.
No code exploit.
Just... an old contract nobody was watching. 👀
Here's how it happened 👇
#scallop runs on #sui 💧
It has a rewards pool for sSUI stakers.
They upgraded their contracts a long time ago.
But the old V2?
Still sitting on-chain.
Still callable.
Forgotten — but not dead.
On #SUI🔥 , deployed contracts are immutable.
You can't delete them.
You can't turn them off.
They just... exist forever.
The attacker found the V2 from November 2023 — 17 months old — and called it directly.
No front end. No SDK. Direct contract call.
The bug was embarrassingly simple:
Every new staking account was supposed to record a last_index — the timestamp of when someone started.
In the old V2, this was never initialized.
So the contract assumed someone had been #staking since day one.
The spool index had been running for 20 months.
It hit 1.19 billion.
Attacker staked 136K sSUI.
Contract calculated 162 trillion reward points.
Pool had 150,000 SUI at a 1:1 rate.
One transaction. Everything gone.
Scallop froze the contract.
Covered 100% of losses.
Resumed in under 2 hours.
But here's what haunts me:
The attacker then reached out and offered to return 80% for a bounty.
Which means they weren't even trying to hide.
They walked in through the front door of an empty house nobody remembered they owned.
This isn't a "$SUI problem."
This is a #defi architecture problem.
How many old contracts are sitting on your favorite protocol right now?🫵
Audited once.
Upgraded.
Forgotten.
Still alive on-chain.
The scariest hacks aren't sophisticated.
They're patient.
🚨 ALERT: Scallop faced an exploit and lost 150,000 SUI.
The affected contract has been frozen and Scallop will cover 100% of the loss.#scallop #SUİ #news #NewsAboutCrypto
The affected contract has been frozen and Scallop will cover 100% of the loss.#scallop #SUİ #news #NewsAboutCrypto
🚨 DeFi Exploit Alert: 150K $SUI Stolen from Scallop Protocol
Even over the weekend, hackers remain highly active.
While the recent exploit on Kelp DAO—with losses nearing $300 million—has yet to be fully resolved, another incident has just surfaced.
➡️ This time: Scallop — one of the leading DeFi protocols on Sui
A vulnerability in a subsidiary contract مرتبط with the sSUI pool was exploited
Approximately 150,000 $SUI has been stolen
➡️ Response from the team
Scallop has announced they will fully compensate (100%) for all user losses
⚠️ Takeaway for DeFi farmers
Reassess your risk vs. reward
This phase of the market comes with increased exploit risks
Not every project will be able to cover losses like Scallop
👉 Stay cautious. Capital preservation matters more than chasing yield
$SUI #scallop
Even over the weekend, hackers remain highly active.
While the recent exploit on Kelp DAO—with losses nearing $300 million—has yet to be fully resolved, another incident has just surfaced.
➡️ This time: Scallop — one of the leading DeFi protocols on Sui
A vulnerability in a subsidiary contract مرتبط with the sSUI pool was exploited
Approximately 150,000 $SUI has been stolen
➡️ Response from the team
Scallop has announced they will fully compensate (100%) for all user losses
⚠️ Takeaway for DeFi farmers
Reassess your risk vs. reward
This phase of the market comes with increased exploit risks
Not every project will be able to cover losses like Scallop
👉 Stay cautious. Capital preservation matters more than chasing yield
$SUI #scallop
Scallop just got exploited for 150,000 SUI.
The vulnerability was in a deprecated rewards contract.
A contract the team already knew was old.
Here's the full read and why the response matters as much as the incident.
Deprecated contracts are the ghost infrastructure of DeFi.
They're old code. Replaced. Superseded.
But still sitting on-chain. Still executable. Still dangerous.
Scallop's team froze the module quickly.
Core funds confirmed unaffected.
Operations already resumed.
And they pledged to cover 100% of user losses.
That last part is rare. And it matters.
Most DeFi exploits follow a predictable script:
Hack occurs. Team goes quiet. Community panics.
Post-mortem published 3 days later. Partial refunds promised. Never fully delivered.
Scallop did the opposite.
Fast freeze. Full transparency. Complete coverage. Operations resumed.
That's not damage control. That's protocol maturity.
Now here's the broader lesson this exploit teaches again.
We flagged earlier this week that Anthropic's Mythos is raising alarms across DeFi security.
AI can now scan smart contracts for vulnerabilities faster than any human audit team.
The Scallop vulnerability wasn't in their active code.
It was in code they thought was harmless.
The most dangerous contracts in DeFi aren't the ones teams are watching.
They're the ones teams stopped watching.
Sui's stablecoin supply nearly tripled this year.
Its DeFi ecosystem is growing fast.
Fast growth and deprecated contracts are a combination the entire ecosystem needs to audit.
Scallop handled this right.
The question is who gets the next one before they do.
#Sui #DeFi #Scallop #Crypto #Security
The vulnerability was in a deprecated rewards contract.
A contract the team already knew was old.
Here's the full read and why the response matters as much as the incident.
Deprecated contracts are the ghost infrastructure of DeFi.
They're old code. Replaced. Superseded.
But still sitting on-chain. Still executable. Still dangerous.
Scallop's team froze the module quickly.
Core funds confirmed unaffected.
Operations already resumed.
And they pledged to cover 100% of user losses.
That last part is rare. And it matters.
Most DeFi exploits follow a predictable script:
Hack occurs. Team goes quiet. Community panics.
Post-mortem published 3 days later. Partial refunds promised. Never fully delivered.
Scallop did the opposite.
Fast freeze. Full transparency. Complete coverage. Operations resumed.
That's not damage control. That's protocol maturity.
Now here's the broader lesson this exploit teaches again.
We flagged earlier this week that Anthropic's Mythos is raising alarms across DeFi security.
AI can now scan smart contracts for vulnerabilities faster than any human audit team.
The Scallop vulnerability wasn't in their active code.
It was in code they thought was harmless.
The most dangerous contracts in DeFi aren't the ones teams are watching.
They're the ones teams stopped watching.
Sui's stablecoin supply nearly tripled this year.
Its DeFi ecosystem is growing fast.
Fast growth and deprecated contracts are a combination the entire ecosystem needs to audit.
Scallop handled this right.
The question is who gets the next one before they do.
#Sui #DeFi #Scallop #Crypto #Security
🚨 SCALLOP ON SUI EXPLOITED! HACKERS DRAIN FUNDS 🚨
💥 The Incident:
DeFi protocol Scallop on the SUI chain suffered a security breach 🥷💻
📉 The Damage:
Lost total of 150,000 SUI 💰❌
✅ THE GOOD NEWS:
Team officially confirmed FULL COVERAGE! 🛡️💸
ALL USER FUNDS WILL BE 100% REFUNDED ✅
They are taking full responsibility to protect the community! 🙏⚖️
#Scallop $SUI #Hack #Exploit #DeFi #Security
💥 The Incident:
DeFi protocol Scallop on the SUI chain suffered a security breach 🥷💻
📉 The Damage:
Lost total of 150,000 SUI 💰❌
✅ THE GOOD NEWS:
Team officially confirmed FULL COVERAGE! 🛡️💸
ALL USER FUNDS WILL BE 100% REFUNDED ✅
They are taking full responsibility to protect the community! 🙏⚖️
#Scallop $SUI #Hack #Exploit #DeFi #Security
🚨 BREAKING: Scallop Protocol hit by a flash loan exploit on the Sui Network. 📉
Details are emerging of a ~$142K drain targeting the sSUI reward pool via oracle price manipulation. The team has moved quickly to freeze the affected side contract and has committed to covering 100% of user losses to ensure no one is left out of pocket. 🛡️
While the core Scallop lending engine remains secure, this serves as a fresh reminder of the risks in complex DeFi reward structures.
Stay safe and keep an eye on your wallet permissions! 🕵️♂️ #SuiNetwork #Scallop #DeFi #BlockchainSecurity
$BTC
$SUI
$ETH
Details are emerging of a ~$142K drain targeting the sSUI reward pool via oracle price manipulation. The team has moved quickly to freeze the affected side contract and has committed to covering 100% of user losses to ensure no one is left out of pocket. 🛡️
While the core Scallop lending engine remains secure, this serves as a fresh reminder of the risks in complex DeFi reward structures.
Stay safe and keep an eye on your wallet permissions! 🕵️♂️ #SuiNetwork #Scallop #DeFi #BlockchainSecurity
$BTC
$SUI
$ETH
SCALLOP PROTOCOL HACKED: 100% COMPENSATION COMMITMENT FOR LOSSES 🏦🔐🛡️
Security breach: #scallop , the leading lending protocol on the Sui ecosystem, has just confirmed that a smart contract related to the sSUI reward pool has been compromised by hackers. The total estimated loss is around 150,000 Sui. ⚠️💸
Damage control: Immediately upon discovery, #ScallopLend promptly froze the affected contract. Notably, the main contract and other asset pools were completely unaffected, ensuring the majority of user capital remains safe. 🧊🛡️
Ultimate responsibility: The Scallop development team has issued an official statement taking full responsibility for this incident. They are committed to compensating all losses to users impacted by this security flaw. 🤝💎
Extended investigation: Currently, the protocol is working with security units to delve deeper into the vulnerability and prevent similar risks in the future. 🕵️♂️🔍
Although this incident has caused some concern within the Sui community, the swift response and compensation commitment from Scallop have helped stabilize investor sentiment, reaffirming the protocol's credibility in protecting user interests.
$SCA $SUI
Security breach: #scallop , the leading lending protocol on the Sui ecosystem, has just confirmed that a smart contract related to the sSUI reward pool has been compromised by hackers. The total estimated loss is around 150,000 Sui. ⚠️💸
Damage control: Immediately upon discovery, #ScallopLend promptly froze the affected contract. Notably, the main contract and other asset pools were completely unaffected, ensuring the majority of user capital remains safe. 🧊🛡️
Ultimate responsibility: The Scallop development team has issued an official statement taking full responsibility for this incident. They are committed to compensating all losses to users impacted by this security flaw. 🤝💎
Extended investigation: Currently, the protocol is working with security units to delve deeper into the vulnerability and prevent similar risks in the future. 🕵️♂️🔍
Although this incident has caused some concern within the Sui community, the swift response and compensation commitment from Scallop have helped stabilize investor sentiment, reaffirming the protocol's credibility in protecting user interests.
$SCA $SUI
After identifying an exploit affecting the side contract related to the sSUI Scallop prize pool, which resulted in a loss of approximately 150,000 @Sui
The impacted contract has been frozen. Our core contract remains secure, and only the prize pool $SUI I was affected. All other pools are safe.
#Scallop will cover 100% of the losses.
$SUI
The impacted contract has been frozen. Our core contract remains secure, and only the prize pool $SUI I was affected. All other pools are safe.
#Scallop will cover 100% of the losses.
$SUI
$SCA #Scallop 🔥🔥💥💥🚀🚀🚀
50% 🆙 since last week
0.65$ to 1.06$ & counting 🆙
It’s moving slowly & steadily ⬆️ and
many will notice when it will touch the profit 🎯.
#CRIPTOHINDUSTAN #scallop #bitcoinhalving #Token2049 #BullorBear
50% 🆙 since last week
0.65$ to 1.06$ & counting 🆙
It’s moving slowly & steadily ⬆️ and
many will notice when it will touch the profit 🎯.
#CRIPTOHINDUSTAN #scallop #bitcoinhalving #Token2049 #BullorBear
$SCA #Scallop 💥💥🚀🚀🚀🚀
30% 🆙
0.65$ to 0.85$
Buy 🎯:- 0.65$ Filled (completed ✔️ ✅)
Now it’s good to Go for GREAT 👍 Uptrend RALLY 🔜.
IF NOT ADDED YET, BUY NOW.
Profit 🎯:- 2$ - 2.5$
Maximum 🎯:- 4$-5$
Easily all 🎯 will be achieved.
HUGE POTENTIAL COIN, MUST HAVE IN UR PORTFOLIO.
#CRIPTOHINDUSTAN #scallop #BullorBear #BinanceLaunchpool #FET
30% 🆙
0.65$ to 0.85$
Buy 🎯:- 0.65$ Filled (completed ✔️ ✅)
Now it’s good to Go for GREAT 👍 Uptrend RALLY 🔜.
IF NOT ADDED YET, BUY NOW.
Profit 🎯:- 2$ - 2.5$
Maximum 🎯:- 4$-5$
Easily all 🎯 will be achieved.
HUGE POTENTIAL COIN, MUST HAVE IN UR PORTFOLIO.
#CRIPTOHINDUSTAN #scallop #BullorBear #BinanceLaunchpool #FET
$SCA #Scallop 💥💥🔥🔥🚀🚀🚀🔜
Ready for a blast 💥 🆙 rally 🔜
Great volume inflow after monthly close.
Buy 🎯:- Filled ✔️ ✅ at 0.55$
If u haven’t added yet, add NOW @0.6$
Profit 🎯 1️⃣ & 2️⃣ shown in 📈
🔜 mostly during this weekly candle close, RSI & candle will breakout for an 🆙 rally.
Close above 0.8$ will send it 🆙 & high
#CRIPTOHINDUSTAN #scallop #scamriskwarning #BNBCrossing660 #ETHETFsApproved
Ready for a blast 💥 🆙 rally 🔜
Great volume inflow after monthly close.
Buy 🎯:- Filled ✔️ ✅ at 0.55$
If u haven’t added yet, add NOW @0.6$
Profit 🎯 1️⃣ & 2️⃣ shown in 📈
🔜 mostly during this weekly candle close, RSI & candle will breakout for an 🆙 rally.
Close above 0.8$ will send it 🆙 & high
#CRIPTOHINDUSTAN #scallop #scamriskwarning #BNBCrossing660 #ETHETFsApproved
$SCA #Scallop 🔥🔥💥🚀🚀🚀🚀🚀
Ready for next rally 🆙 ⬆️
Will bottomed out around 0.5$ now at 0.58$
VOLUME STARTED FLOWING IN
RSI BREAKING OUT
Buy 🎯:- 0.5$—0.6$
Updated profit 🎯 1️⃣ & 2️⃣ in 📈.
Maximum 🎯:- 4$—5$
HUGE POTENTIAL COIN, MUST HAVE INNUR PORTFOLIO FOR UPCOMING SEASON.
#CRIPTOHINDUSTAN #scallop #altcoins #GME #Memecoins
Ready for next rally 🆙 ⬆️
Will bottomed out around 0.5$ now at 0.58$
VOLUME STARTED FLOWING IN
RSI BREAKING OUT
Buy 🎯:- 0.5$—0.6$
Updated profit 🎯 1️⃣ & 2️⃣ in 📈.
Maximum 🎯:- 4$—5$
HUGE POTENTIAL COIN, MUST HAVE INNUR PORTFOLIO FOR UPCOMING SEASON.
#CRIPTOHINDUSTAN #scallop #altcoins #GME #Memecoins
On December 14 that according to official news, #Sui Ecological Lending Protocol #Scallop will launch an #Airdrop event during Christmas from December 14 to 26.
Users only need to borrow at least $1,000 in assets/hold 1,000 veSCA to qualify for the airdrop. The total amount of airdrop is 1 million SCA, and the airdrop issuance date is December 26. Currently, Scallop #tvl has reached an all-time high of 195 million, and the total borrowing amount has reached 90 million US dollars.
#CryptoNews🚀🔥
Users only need to borrow at least $1,000 in assets/hold 1,000 veSCA to qualify for the airdrop. The total amount of airdrop is 1 million SCA, and the airdrop issuance date is December 26. Currently, Scallop #tvl has reached an all-time high of 195 million, and the total borrowing amount has reached 90 million US dollars.
#CryptoNews🚀🔥
🚀 Scallop is making strong strides towards the future!
Join Kris Lai, the founder and CEO of Scallop, as he shares the latest developments and upcoming plans for the platform, emphasizing the unique innovations that set Scallop apart in the decentralized finance (DeFi) world on the Sui network.
💡 Highlights from his talk:
Developing smart financial tools that make the user experience easier and faster.
Enhancing transparency and security in all transactions.
Future plans to make Scallop an indispensable platform for the DeFi community.
✨ Scallop is not just a financial platform, but a journey towards an innovative future that blends technology and creativity.
📌 If you are interested in decentralized finance or looking for an opportunity to discover new things in the DeFi world, now is the perfect time to follow Scallop closely.
🔗 Share your opinion 👇 and stay updated with all the latest!
$SUI
#Scallop #defi #CryptoInnovation #SuiNetwork #BlockchainRevolution
Join Kris Lai, the founder and CEO of Scallop, as he shares the latest developments and upcoming plans for the platform, emphasizing the unique innovations that set Scallop apart in the decentralized finance (DeFi) world on the Sui network.
💡 Highlights from his talk:
Developing smart financial tools that make the user experience easier and faster.
Enhancing transparency and security in all transactions.
Future plans to make Scallop an indispensable platform for the DeFi community.
✨ Scallop is not just a financial platform, but a journey towards an innovative future that blends technology and creativity.
📌 If you are interested in decentralized finance or looking for an opportunity to discover new things in the DeFi world, now is the perfect time to follow Scallop closely.
🔗 Share your opinion 👇 and stay updated with all the latest!
$SUI
#Scallop #defi #CryptoInnovation #SuiNetwork #BlockchainRevolution
Login to explore more contents