SushiSwap RouteProcessor Exploit
Provisional: this score is the AI investigator's judgment, not yet calculated by our published formula. Treat it as indicative. How scoring works →
anchored·61pXPL…gDZKSummary
On April 9, 2023, SushiSwap's RouteProcessor2 contract — deployed just one day earlier across 14 blockchain networks — was exploited due to a failure to validate user-supplied pool addresses, allowing an attacker to redirect token transfers from wallets that had approved the contract. Approximately $3.3 million (roughly 1,800 WETH) was drained, with a single high-profile victim (@0xsifu) accounting for the majority of losses. Whitehat security teams front-ran further exploitation and recovered over $750,000, while SushiSwap committed to making all affected users whole through a two-tier compensation process.
Connected Entities
9 entities · 60 linked investigations- SushiSwap RouteProcessor Exploit→mentioned with→Arbitrum(65%)
- SushiSwap RouteProcessor Exploit→mentioned with→Ethereum(60%)
- Optimism→mentioned with→Arbitrum(65%)
- SushiSwap RouteProcessor Exploit→mentioned with→Optimism(60%)
- Optimism→mentioned with→Ethereum(80%)
- SushiSwap RouteProcessor Exploit→mentioned with→Polygon(65%)
- SushiSwap RouteProcessor Exploit→mentioned with→SushiSwap(70%)
- SushiSwap RouteProcessor Exploit→mentioned with→Uniswap(60%)
- SushiSwap→mentioned with→Arbitrum(65%)
- SushiSwap→mentioned with→Ethereum(60%)
- + 16 more
Timeline(10 events)
August 2021
Paradigm researchers discover critical vulnerability in SushiSwap MISO dutch auction contract, potentially exposing ~$350M. Patched in under five hours with no funds lost.
CoinMarketCap Academy17 September 2021
SushiSwap MISO launchpad suffers $3M supply chain attack. Contractor AristoK3 injects malicious frontend code redirecting 864.8 ETH from JayPegs Auto Mart auction. Funds later returned.
Decrypt8 November 2022
Logic bug in SushiSwap KashiPairMediumRiskV1 contract exploited, draining assets from affected lending pools.
BlockSec Medium8 April 2023
SushiSwap deploys RouteProcessor2 contract across 14 blockchain networks as part of V3 upgrade rollout. Contract is non-upgradeable and non-pausable.
SushiSwap RouteProcessor2 Post Mortem8 April 2023
HYDN security team's real-time monitoring flags vulnerability in RouteProcessor2. Team creates proof-of-concept and contacts SushiSwap. Joint war room established. SushiSwap UI rolled back to prevent further approvals.
HYDN Security Blog9 April 2023
Independent whitehat @trust__90 attempts rescue of 100 ETH via public mempool, inadvertently broadcasting the exploit to MEV bots. Cascade of copycat transactions drains approximately 1,800 WETH (~$3.3M) primarily from @0xsifu's wallet.
BlockSec Blog9 April 2023
Jared Grey publicly confirms exploit, tweets: 'Sushi's RouteProcessor2 contract has an approval bug; please revoke approval ASAP.' Directs users to revoke.cash and sushi.com. HYDN authorized to conduct cross-chain whitehat rescue.
The Block9 April 2023
HYDN completes whitehat rescue, draining vulnerable funds to labeled wallet 0x74ebb8e8d0b0cc65f06040eb0f77b5da0e33ffee and deploying cross-chain watcher contract. Over $750,000 in user assets secured across multiple networks.
HYDN Security Blog10 April 2023
SushiSwap releases RouteProcessor2 post-mortem and simultaneously releases response to SEC subpoena. Protocol announces two-tier compensation plan for affected users.
Blockhead25 April 2023
SushiSwap launches RouteProcessor2 claim portal (sushi.com/claims/rp2) for Group 1 victims (rescued funds), enabling 1:1 token reclamation after revoking the vulnerable contract.
SushiSwap on XDecision Log
- slot 445506410 · hash DrwY4DeKeAZLeQBArQMboMii7Gnja77cSZEW3izrJXRs
- slot 426514683 · hash 7hwu4Pez79swqKFxPf7u6B6C778Loy6n3p89mXUCcMsv
- slot 426514680 · hash GFAJMv47NDdBm6zcztm4cqrSbmpjeBE9DSuxpGnseADU
- slot 424157088 · hash FJKXBGp596avALufkimmSLdcMdGgpQ9iuY4dMQ9S8aJi
- slot 424157085 · hash vwcT3KaVp3AJ2J8JkCrzAmPmbLJqem4knM4TR1epkG1
- slot 423640513 · hash 7YkvRdJnofyhboZDJDNXXiuBPjv4Ld1Ks1mATKFV21Px
This investigation is cryptographically anchored to the Solana blockchain (6 decisions). 17 of 18 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 6/1/2026, 5:49:34 PM
last updated: 6/1/2026, 5:49:34 PM
3 viewsavoid.net — verified advice for a post-truth world