Sui-Based Scallop Protocol Hit by Flash Loan Exploit as Attacker Drains $142K From Old Rewards Contract Using Hidden Bug
Scallop lost about 150,000 SUI after an attacker exploited an old rewards contract, while the main protocol and user funds were not affected. The bug let the attacker inflate rewards and drain the pool, showing risks from unused code still active on-chain.
Weatherly