Scallop Suffers 150,000 SUI Loss from sSUI Reward Pool Vulnerability
Severity: Medium (Score: 48.9)
Sources: Chaincatcher, Panewslab, Mexc.Co
Summary
On April 26, 2026, Scallop, a lending protocol in the Sui ecosystem, reported a vulnerability in an affiliate contract related to its sSUI reward pool, leading to a loss of approximately 150,000 SUI. The affected contract has been frozen to prevent further exploitation. Scallop confirmed that the core contract remains secure and that all other reward pools are unaffected. The company has committed to fully covering the losses incurred by users. Further updates regarding the incident are expected to be released soon. This incident highlights the risks associated with decentralized finance protocols and the importance of robust security measures. Key Points: • Scallop lost approximately 150,000 SUI due to a vulnerability in its sSUI reward pool. • The affected contract has been frozen, and the core contract remains secure. • Scallop will fully cover the losses and provide updates as they become available.
Key Entities
- Data Breach (attack_type)
- Zero-day Exploit (attack_type)
- Scallop (company)
- Aethir (company)
- KelpDAO (company)
- Litecoin (company)
- Solana (platform)
- Sui (platform)