Hack history / 2020 / Hack or exploit
SushiSwap
Hack or exploit on Nov 30, 2020 · Improper Access Control
SOURCES AGREE ON DATE AND LOSS · 2 SOURCES
Lost
$15K
dollars at the time
Returned
none listed
as the sources state it
Rank
#2,189
among thefts by dollars lost
What happened
SushiMaker malicious-pool fee capture attack where an attacker created a malicious pool and redirected SushiSwap fees to it. The attacker captured approximately 15,000 USD in accumulated fees through access control vulnerabilities in the fee-distribution mechanism.
Details
- Date
- Nov 30, 2020
- Kind
- Hack or exploit
- Method
- Improper Access Control
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- Ethereum
After the theft
- Victims reimbursed
- $10K
“The liquidity mining project SushiSwap (SUSHI) community governor 0xMaki announced in the Discord group that the SushiSwap vulnerability has been fixed, and the lost funds (approximately US$10,000) will be compensated from the SUSHI asset library.” (SlowMist Hacked)
Reported by
Related incidents
Cite this page
SwanBluechip, "SushiSwap hack, Nov 30, 2020: $15K lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht4fc3b664d3/ (data as of 2026-11-01).