Another Day, Another DeFi Exploit: Scallop ($SCA), Sui's biggest lending protocol, just got hit for ~$140K in a fresh exploit.



What happened:
The attacker targeted a deprecated rewards contract, not the core protocol. Scallop temporarily froze contracts, isolated the bug, and resumed operations. User deposits are SAFE.

Why this matters:
This is the 13th DeFi exploit in April 2026 alone. Industry losses this month already crossed $606 Million, the worst month since Bybit.

The $SUI Pattern is Clear:
🔻 Cetus DEX - $223M (May 2025)
🔻 Nemo Protocol - $2.4M (Sept 2025)
🔻 Volo Protocol - $3.5M (April 22, 2026)
🔻 Scallop - ~$140K (Today)

Key Lesson for Our Family:
1️⃣ Audited does NOT mean safe.
2️⃣ Scallop completed a full Sui Foundation audit in Feb 2025. Kelp DAO ($292M loss) passed TWO audits. Yet both got drained.
3️⃣ Old, forgotten contracts are the new attack surface in 2026.

Risk Management Tips:
✅ Never park 100% funds in one DeFi protocol
✅ Avoid interacting with deprecated/legacy contracts
✅ Withdraw rewards regularly, do not let them sit
✅ Follow protocol announcements before deposits

DeFi is the future, but smart money manages risk first.
SCA0.12%
SUI2.65%
IN1.73%
post-image
This page may contain third-party content, which is provided for information purposes only (not representations/warranties) and should not be considered as an endorsement of its views by Gate, nor as financial or professional advice. See Disclaimer for details.
  • Reward
  • Comment
  • Repost
  • Share
Comment
Add a comment
Add a comment
No comments
  • Pin