SushiSwap outlines plan to compensate users after hack

The DEX SushiSwap team has disclosed details of the exploit that occurred and the general framework for reimbursing users for the funds they lost.

? RouteProcessor2 Exploit & User Refund Update!

? Read the below thread about: what's next for affected user funds and what processes we're setting up to return user funds.

?️ Firstly, please know that Sushi's Swap web app is safe to use now!

???

— Sushi.com (@SushiSwap) April 12, 2023

The developers again reminded users to revoke approvals for the vulnerability-affected smart contract. This is not necessary if interactions with RouteProcessor2 occurred more than 10 days ago.

They said, more broadly, that the SushiSwap platform is ‘absolutely safe’ to use.

During the exploit, funds were withdrawn by both white-hat hackers seeking to salvage funds and by the attackers.

If assets fell into the first category, the user will be able to claim them via a Merkle Claim contract created by the team. It is expected that the mechanism will go live soon.

Those whose funds are in the second group must provide the team with information about transactions and blockchain data via email or Discord.

“The Sushi team will begin the process of reviewing claims to which a user may be entitled, and we will address the claims on a case-by-case basis,” the developers said.

They estimate the process will take a considerable amount of time due to the large amount of manual work, with more detail to be provided soon.

“Our goal is to return all user funds to rightful claimants. We value everyone's patience and understand your disappointment,” they assured SushiSwap.

BlockSec specialists managed to intercept the hacker's transaction of 100 ETH from a DEX user’s wallet, which had 1,800 ETH stolen in the attack.