Scallop lending protocol on Sui network suffers security exploit.
Security & Exploits ·
Scallop, a lending protocol on the Sui network, disclosed a security exploit affecting a side contract connected to its sSUI spool rewards pool, resulting in a loss of approximately 150,000 SUI tokens. The protocol stated that the compromised contract has been frozen and that its core contracts remain unaffected, with only the sSUI rewards pool impacted while all other pools remain safe.
The incident was isolated to a rewards mechanism rather than the protocol's primary functionality. Scallop announced it will cover 100% of the loss sustained by users affected by the exploit.
The protocol indicated an active investigation is underway with further updates to follow, though specific details about the exploit's technical nature, timeline, or root cause have not yet been disclosed publicly.