shield Other · $3.3M loss

How SushiSwap lost $3.3M to an unclassified exploit in April 2023

On April 2023, SushiSwap was exploited in a other, resulting in approximately $3.3M in losses. That makes the SushiSwap exploit the 53rd largest DeFi incident out of 690 documented in our archive.

Attack Mechanics: How the SushiSwap Other Played Out

Exploit Class Applied to SushiSwap

The SushiSwap incident on April 9, 2023 is classified as a Other. A specific exploit class outside the most common buckets. In the full archive, SushiSwap is 1 of 188 documented other incidents.

SushiSwap in Context

At $3.3M, the SushiSwap exploit is a significant ($1M–$10M) event compared to the largest same-class incident in our archive — MIMSpell (2024) at $65M.

Prior Other Before SushiSwap

The nearest other incident before SushiSwap was – Thena, 12 days earlier on March 28, 2023 ($10K lost). The same exploit class surfaced again within the other attack surface.

SushiSwap Vulnerability Signature

The primary source categorises the SushiSwap exploit specifically as “Unchecked User Input”. This narrower label is entity-specific: it reflects how the SushiSwap contract failed, rather than the broad other pattern alone.

Impact & Recovery for SushiSwap

SushiSwap Loss Figure

The SushiSwap exploit caused $3,300,000 in losses — a significant ($1M–$10M) incident and the 16th largest of 214 documented in 2023. This single incident represents 0.5% of all tracked losses that year.

Where SushiSwap Sits Among Other Attacks

Ranked by loss size, SushiSwap is the 12th largest of 188 other incidents documented. That puts the SushiSwap loss above the class average of $2.03M.

Timeline Since the SushiSwap Incident

The SushiSwap exploit occurred 3 years ago (1,101 days). The contract, its fork-block, and the attack transaction remain on-chain and forensically reproducible.

Primary Reference for SushiSwap

Public post-mortem / on-chain analysis for the SushiSwap incident: view source.

FAQ

How much did SushiSwap lose?

The SushiSwap exploit in April 2023 resulted in $3,300,000 in losses — the 16th largest of 214 DeFi incidents that year.

When did the SushiSwap hack happen?

The SushiSwap exploit was recorded on April 9, 2023 — 1,101 days ago.

What type of exploit hit SushiSwap?

The SushiSwap incident is classified as a Other. A specific exploit class outside the most common buckets.

How common is the Other pattern seen at SushiSwap?

Our archive contains 188 documented other incidents. The SushiSwap incident is one of them.

How does SushiSwap compare to the largest Other attack?

The largest other incident in our archive is MIMSpell (2024) at $65M. The SushiSwap loss is $3.3M.

What method is used to study the causal relationship between transaction fees and economic activity on the Ethereum blockchain?

Time-varying Granger causality analysis is used.

How do cryptocurrencies challenge conventional financial practices?

By enabling decentralized, cross-border transactions and promoting financial inclusion.