1 article
Scallop lost 150K SUI to an attacker who bypassed active code and hit a forgotten V2 contract from 2023. The bug sat undetected for 17 months on Sui.