MISO
Hack or exploit on Sep 16, 2021 · Malicious Code Injection Attack
What happened
The DONA token auction of the Jay Pegs Auto Mart project on the SushiSwap Launchpad platform MISO was attacked. The attacker inserted malicious code into the MISO front end and changed the auction wallet address to his own wallet address. The loss has now reached 865 ETH (approximately 3.07 million). Dollar). Joseph Delong, CTO of SushiSwap, said on Twitter that the vulnerability has been fixed and that FTX and Binance have been asked to provide the attacker's KYC information, but both exchanges refused to cooperate. In addition, Joseph Delong also stated that he has reported the case to the FBI through his lawyer and reminded the project party to check whether there are similar front-end vulnerabilities. According to the Ethereum block explorer Etherscan, the attacker returned all ETH to SushiSwap. The operation was divided into two transactions, the first return 100 ETH, the second return 700 ETH, and the third return 65 ETH.
Details
- Date
- Sep 16, 2021
- Kind
- Hack or exploit
- Method
- Malicious Code Injection Attack
- How in
- Keys, accounts and infrastructure
- Target
- not stated
- Chains
- Ethereum
After the theft
- Returned by the attacker
- yes, amount not stated
“According to the Ethereum block explorer Etherscan, the attacker returned all ETH to SushiSwap.” (SlowMist Hacked)
Reported by
Related incidents
OpenSea 2021 · Hack or exploit · undisclosed
ZKS 2021 · Hack or exploit · undisclosed
SwanBluechip, "MISO hack, Sep 16, 2021: undisclosed lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht4702b499d7/ (data as of 2026-11-01).