SushiSwap MISO White Hat Diffusal - Revision history

Azoundria at 23:56, 2 May 2023

2023-05-02T23:56:42Z

← Older revision		Revision as of 17:56, 2 May 2023
Line 1:		Line 1:
	{{Imported Case Study\|source=https://www.quadrigainitiative.com/casestudy/sushiswapmisowhitehatdiffusal.php}}		{{Imported Case Study 2\|source=https://www.quadrigainitiative.com/casestudy/sushiswapmisowhitehatdiffusal.php}}
	{{Unattributed Sources}}		{{Unattributed Sources}}

Line 6:		Line 6:
	Luckily, the exploit was found by a white hat security researcher, rather than a black hat hacker. As it turns out, the auction in question completed before any rescue had to be implemented. There was no loss suffered.		Luckily, the exploit was found by a white hat security researcher, rather than a black hat hacker. As it turns out, the auction in question completed before any rescue had to be implemented. There was no loss suffered.

	This is a global/international case not involving a specific country.		This is a global/international case not involving a specific country.<ref name="openblocksecgithub-2342" /><ref name="paradigm-3529" /><ref name="muditblog-3530" /><ref name="hackmd-3531" /><ref name="blocksecteamgithub-3532" /><ref name="adrianhetman-3527" /><ref name="googledrive-3533" /><ref name="sushiswapgithub-3534" /><ref name="googledrive-3535" /><ref name="instantmiso-3536" /><ref name="instantmiso-3537" /><ref name="coinmarketbag-3538" /><ref name="coindesk-3539" /><ref name="coingecko-899" /><ref name="gainsassociatesmedium-901" /><ref name="sushi-3867" /><ref name="cyberbump-6540" /><ref name="coindesk-6541" /><ref name="defidotwin-6563" />
	<ref name="openblocksecgithub-2342" /><ref name="paradigm-3529" /><ref name="muditblog-3530" /><ref name="hackmd-3531" /><ref name="blocksecteamgithub-3532" /><ref name="adrianhetman-3527" /><ref name="googledrive-3533" /><ref name="sushiswapgithub-3534" /><ref name="googledrive-3535" /><ref name="instantmiso-3536" /><ref name="instantmiso-3537" /><ref name="coinmarketbag-3538" /><ref name="coindesk-3539" /><ref name="coingecko-899" /><ref name="gainsassociatesmedium-901" /><ref name="sushi-3867" /><ref name="cyberbump-6540" /><ref name="coindesk-6541" /><ref name="defidotwin-6563" />

	== About SushiSwap ==		== About SushiSwap ==
Line 88:		Line 87:
	!Description		!Description
	\|-		\|-
	\|August 16th, 2021 11:40:00 AM		\|August 16th, 2021 11:40:00 AM MDT
	\|Main Event		\|Main Event
	\|Expand this into a brief description of what happened and the impact. If multiple lines are necessary, add them here.		\|Expand this into a brief description of what happened and the impact. If multiple lines are necessary, add them here.
Line 96:		Line 95:
	\|		\|
	\|}		\|}

			== Technical Details ==
			This section includes specific detailed technical analysis of any security breaches which happened. What specific software vulnerabilities contributed to the problem and how were they exploited?

	== Total Amount Lost ==		== Total Amount Lost ==
Line 115:		Line 117:
	== Ongoing Developments ==		== Ongoing Developments ==
	What parts of this case are still remaining to be concluded?		What parts of this case are still remaining to be concluded?
			== General Prevention Policies ==
	== Prevention Policies ==
	Despite three audits, it's still possible for a complex smart contract to contain vulnerabilities. For that reason, protocols should have the majority of funds stored in a simple multi-sig treasury arrangement to limit losses. Those which are "hot" should be insured through smart contract insurance, self insurance from additional funds in the treasury, or an industry insurance fund.		Despite three audits, it's still possible for a complex smart contract to contain vulnerabilities. For that reason, protocols should have the majority of funds stored in a simple multi-sig treasury arrangement to limit losses. Those which are "hot" should be insured through smart contract insurance, self insurance from additional funds in the treasury, or an industry insurance fund.

	Having a bug bounty program is a great idea to reduce the risk of breach. No funds were lost in this case due to the efforts of white hackers to find and fix the vulnerability before it could be exploited.		Having a bug bounty program is a great idea to reduce the risk of breach. No funds were lost in this case due to the efforts of white hackers to find and fix the vulnerability before it could be exploited.
			== Individual Prevention Policies ==
			{{Prevention:Individuals:Placeholder}}

			{{Prevention:Individuals:End}}

			== Platform Prevention Policies ==
			{{Prevention:Platforms:Placeholder}}

			{{Prevention:Platforms:End}}

			== Regulatory Prevention Policies ==
			{{Prevention:Regulators:Placeholder}}

			{{Prevention:Regulators:End}}

	== References ==		== References ==
Line 142:		Line 157:
	<ref name="instantmiso-3536">[https://instantmiso.com/ MISO \| Minimal Initial SushiSwap Offering] (Sep 28, 2021)</ref>		<ref name="instantmiso-3536">[https://instantmiso.com/ MISO \| Minimal Initial SushiSwap Offering] (Sep 28, 2021)</ref>

	<ref name="instantmiso-3537">[https://instantmiso.gitbook.io/miso/ ~~https://instantmiso.gitbook.io/miso/~~] (Sep 28, 2021)</ref>		<ref name="instantmiso-3537">[https://instantmiso.gitbook.io/miso/ Minimal Initial SushiSwap Offering - MISO] (Sep 28, 2021)</ref>

	<ref name="coinmarketbag-3538">[https://coinmarketbag.com/sushiswap-miso-dutch-auction-bug-350mn-saved/ Sushiswap Miso Dutch Auction Bug \| $350Mn Saved! \| CoinMarketBag] (Sep 28, 2021)</ref>		<ref name="coinmarketbag-3538">[https://coinmarketbag.com/sushiswap-miso-dutch-auction-bug-350mn-saved/ Sushiswap Miso Dutch Auction Bug \| $350Mn Saved! \| CoinMarketBag] (Sep 28, 2021)</ref>

Azoundria at 03:57, 23 February 2023

2023-02-23T03:57:01Z

Azoundria: Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/sushiswapmisowhitehatdiffusal.php}} SushiSwapThe SushiSwap MISO is a smart contract which assists with launching new coins and tokens which are managed through a smart contract hot wallet. The contract underwent 3 separate audits by reputable firms as well as multiple security researchers had reviewed it. And yet, there was still a bug found which would have been able..."

2023-01-27T21:16:39Z

Created page with "{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/sushiswapmisowhitehatdiffusal.php}} thumb|SushiSwapThe SushiSwap MISO is a smart contract which assists with launching new coins and tokens which are managed through a smart contract hot wallet. The contract underwent 3 separate audits by reputable firms as well as multiple security researchers had reviewed it. And yet, there was still a bug found which would have been able..."

New page

{{Imported Case Study|source=https://www.quadrigainitiative.com/casestudy/sushiswapmisowhitehatdiffusal.php}}

[[File:Sushiswap.jpg|thumb|SushiSwap]]The SushiSwap MISO is a smart contract which assists with launching new coins and tokens which are managed through a smart contract hot wallet. The contract underwent 3 separate audits by reputable firms as well as multiple security researchers had reviewed it. And yet, there was still a bug found which would have been able to drain all $350m in funds.

Luckily, the exploit was found by a white hat security researcher, rather than a black hat hacker. As it turns out, the auction in question completed before any rescue had to be implemented. There was no loss suffered.

This is a global/international case not involving a specific country.

== About SushiSwap ==
"Be a DeFi Chef with Sushi. Swap, earn, stack yields, lend, borrow, leverage all on one decentralized, community driven platform. Welcome home to DeFi."

"Sushi is a DeFi protocol that is completely community-driven, serving up delicious interest for your held crypto assets." "On Sushi, you can take advantage of passive-income providing DeFi tools such as liquidity providing, yield farming and staking. Furthermore, due to the decentralized nature of being an AMM (Automated Market Maker), Sushi has fewer hurdles to execute your cryptocurrency trades and all fees are paid to the users who provided liquidity, just as it should be!"

"[A] pseudonymous developer who goes by “Chef Nomi” launched the SushiSwap protocol in late August [2020], and it was quickly cast as a “vampire protocol” because its inherent design intended to siphon away liquidity from a competing trading platform, Uniswap."

“… we have designed SushiSwap as the next step forward in the Uniswap protocol design. Taking Uniswap’s elegant core design, we’ve added community-oriented features that we believe help improve the design of the protocol, as well as provide further benefits to the actors involved.”

"Minimal Initial SushiSwap Offering" "MISO is a suite of open-source smart contracts created to ease the process of launching a new project on the SushiSwap exchange. MISO aims to drive new capital and trade to the exchange by increasing the attractiveness of SushiSwap as a place for token creators and communities to launch new project tokens. We aim to create a launchpad for both technical and non-technical project founders, that will allow communities and projects access to all the options they need for a secure and successful deployment to the SushiSwap exchange."

"MISO MARKET - Sell your tokens via Crowdsale, IBCO or Dutch auction." "List on SushiSwap - We take some of the tokens you made, and some of the money you made selling them, and launch them on the SushiSwap exchange." "Our Fermentation selections make the locking away of tokens before and during a launch simple and manageable, working seamlessly with our Markets, Farms and Liquidity Migration contracts." "Recipes combine one or many ingredients to create and launch your own token. We have carefully selected a few of the more interesting combinations as a way to help you get started. You can always build your own MISO from any of our ingredients."

"The DutchAuction smart contract inherits the BoringBatchable utility contract that allows callers to batch different calls together." "BoringBatchable is a mixin library which is designed to easily introduce batch calls to any contract which imports it. It does this by performing a delegatecall on the current contract for each call data provided in the input."

"MISO had gone through 3 audits and a few independent reviews."

"initMarket function had no access controls, which was extremely concerning. Furthermore, the initAuction function it called also contained no access control checks."

"There is a commitEth function in the auction contract that uses msg.value to know the amount of ETH commited by the user. If the user commits more ETH than the contract’s capacity, the contract refunds the extra ETH. This function is fine on its own but becomes a vulnerability when combined with the batch function from BoringBatachable."

"Inside a delegatecall, msg.sender and msg.value are persisted. This meant that I should be able to batch multiple calls to commitEth and reuse my msg.value across every commitment, allowing me to bid in the auction for free."

"[A] refund would be issued for any ETH sent which went over the auction’s hard cap. This applied even once the hard cap was hit, meaning that instead of rejecting the transaction altogether, the contract would simply refund all of your ETH instead."

"The batch function works by making multiple DELEGATECALLs to itself (the Auction contract). An interesting aspect about DELEGATECALL is that they use the same global context as the parent call so every DELEGATECALL has the same msg.value that the parent call had.
This means that you can pass 1 ETH to the batch function and call the commitEth function a hundred times with 1 ETH as msg.value, every time."

"Since the commitEth function uses msg.value to know the amount committed, it will get tricked into thinking that the user committed 100 ETH (1*100) instead of the actual amount (1 ETH). If the contract had only 1 ETH of capacity left, it will refund the remaining 99 ETH to the user."

"In summary, the user can put in 1 ETH but get out 99 ETH as refund. The numbers can be scaled up or down."

"Since a large amount of funds were at risk (~$350 million), we decided to keep the inner circle small and started the war room / incident response bridge call. The group was split into two teams, the first team’s job was to analyze our options and do a white hack if need be. The other team was doing the boring yet necessary work of comms, waking up people who controlled relevant keys, and stuff like that."

"After some quick debate, we decided that" "Rescu[ing] the funds by purchasing the remaining allocation and immediately finalizing the auction" "was the cleanest approach." "We decided that it would be cleanest to take a flash loan, purchase up to the hard cap, finalize the auction, then repay the flash loan using proceeds from the auction itself. This would require no upfront capital, which was very nice."

"After some more thinking, I realized that we could use the points list to verify that the auction contract had enough ETH to match the commitments being made. In other words, if someone tried to exploit this bug, then there would be more commitments than there was ETH. We could easily detect this and revert the transaction. Mudit and Keno began working on writing a test to verify."

"While we are doing the final checks, we realized that the auction had naturally sold out. Someone bought in at the last moment. We no longer needed the flash loan to buy out the auction. All we had to do now is to finalize the auction so that the vulnerability is mitigated and the funds are taken out from the auction contract to a secure wallet. We already had the folks with relevant permissions on a call so we managed to finalize the auction immediately. Funds were now safe, the storm had passed." "No user action is required. No funds have been lost."

"The past few hours feel like a blur, almost as though no time has passed at all. I had gone from encounter to discovery in a little over half an hour, disclosure in 20 minutes, war room in another 30, and a fix in three hours. All in all, it took only five hours to protect 350 million USD from falling into the wrong hands."

"First, using msg.value in complex systems is hard. It’s a global variable that you can’t change and persists across delegate calls. If you use msg.value to check that payment was received, you absolutely cannot place that logic in a loop. As a codebase grows in complexity, it’s easy to lose track of where that happens and accidentally loop something in the wrong place. Although wrapping and unwrapping of ETH is annoying and introduces extra steps, the unified interface between WETH and other ERC20 tokens might be well worth the cost if it means avoiding something like this."

This is a global/international case not involving a specific country.

The background of the exchange platform, service, or individuals involved, as it would have been seen or understood at the time of the events.

Include:

* Known history of when and how the service was started.
* What problems does the company or service claim to solve?
* What marketing materials were used by the firm or business?
* Audits performed, and excerpts that may have been included.
* Business registration documents shown (fake or legitimate).
* How were people recruited to participate?
* Public warnings and announcements prior to the event.

Don't Include:
* Any wording which directly states or implies that the business is/was illegitimate, or that a vulnerability existed.
* Anything that wasn't reasonably knowable at the time of the event.
There could be more than one section here. If the same platform is involved with multiple incidents, then it can be linked to a main article page.

== The Reality ==
This sections is included if a case involved deception or information that was unknown at the time. Examples include:

* When the service was actually started (if different than the "official story").
* Who actually ran a service and their own personal history.
* How the service was structured behind the scenes. (For example, there was no "trading bot".)
* Details of what audits reported and how vulnerabilities were missed during auditing.

== What Happened ==
The specific events of the loss and how it came about. What actually happened to cause the loss and some of the events leading up to it.
{| class="wikitable"
|+Key Event Timeline - SushiSwap MISO White Hat Diffusal
!Date
!Event
!Description
|-
|August 16th, 2021 11:40:00 AM
|Main Event
|Expand this into a brief description of what happened and the impact. If multiple lines are necessary, add them here.
|-
|
|
|
|}

== Total Amount Lost ==
The total amount at risk has been estimated at $350,000,000 USD. No funds were lost.

How much was lost and how was it calculated? If there are conflicting reports, which are accurate and where does the discrepancy lie?

== Immediate Reactions ==
How did the various parties involved (firm, platform, management, and/or affected individual(s)) deal with the events? Were services shut down? Were announcements made? Were groups formed?

== Ultimate Outcome ==
What was the end result? Was any investigation done? Were any individuals prosecuted? Was there a lawsuit? Was any tracing done?

== Total Amount Recovered ==
There do not appear to have been any funds recovered in this case.

What funds were recovered? What funds were reimbursed for those affected users?

== Ongoing Developments ==
What parts of this case are still remaining to be concluded?

== Prevention Policies ==
Despite three audits, it's still possible for a complex smart contract to contain vulnerabilities. For that reason, protocols should have the majority of funds stored in a simple multi-sig treasury arrangement to limit losses. Those which are "hot" should be insured through smart contract insurance, self insurance from additional funds in the treasury, or an industry insurance fund.

Having a bug bounty program is a great idea to reduce the risk of breach. No funds were lost in this case due to the efforts of white hackers to find and fix the vulnerability before it could be exploited.

== References ==
[https://github.com/openblocksec/blocksec-incidents/blob/main/defi/2021.md blocksec-incidents/2021.md at main · openblocksec/blocksec-incidents · GitHub] (Aug 10)

[https://www.paradigm.xyz/2021/08/two-rights-might-make-a-wrong/ Two Rights Might Make A Wrong - Paradigm] (Aug 28)

[https://mudit.blog/miso-war-room/ A peek inside the MISO war room - $350m incident response story | Mudit Gupta's Blog] (Aug 28)

[https://hackmd.io/@353yQn6WTImF5o12LQXXfQ/Hy2ZDYFxF HackMD - Collaborative Markdown Knowledge Base] (Aug 28)

[https://github.com/blocksecteam/defi_poc/tree/main/sushi_MISO/exploit defi_poc/sushi_MISO/exploit at main · blocksecteam/defi_poc · GitHub] (Aug 28)

[https://www.adrianhetman.com/monthly-defi-blood-bath-report-4/ Monthly DeFi Blood Bath Report #4] (Sep 27)

[https://drive.google.com/file/d/1F9BSA9Q0WFv2LGL8AQuvzvxZllT2w4um/view SushiSwap_MISO_SmartContract_Report_Halborn_v1.pdf - Google Drive] (Sep 27)

[https://github.com/sushiswap/miso/tree/master/spec miso/spec at master · sushiswap/miso · GitHub] (Sep 27)

[https://drive.google.com/file/d/1tcYBuKF5XUYTaMokvN5Om5Bg3_32huXR/view MISO Security Audit Report (merged) - HackMD.pdf - Google Drive] (Sep 27)

[https://instantmiso.com/ MISO | Minimal Initial SushiSwap Offering] (Sep 27)

[https://instantmiso.gitbook.io/miso/ https://instantmiso.gitbook.io/miso/] (Sep 27)

[https://coinmarketbag.com/sushiswap-miso-dutch-auction-bug-350mn-saved/ Sushiswap Miso Dutch Auction Bug | $350Mn Saved! | CoinMarketBag] (Sep 27)

[https://www.coindesk.com/tech/2021/08/17/white-hats-just-defused-a-potential-350m-heist-on-sushiswap/ CoinDesk: Bitcoin, Ethereum, Crypto News and Price Data] (Sep 27)

[https://www.coingecko.com/en/coins/sushi Sushi price, chart, market cap and info | CoinGecko] (May 23)

[https://medium.com/gains-associates/the-rise-fall-and-rise-of-sushiswap-ca7753da067f The Rise Fall And Rise Of Sushiswap] (May 23)

[https://sushi.com/ SushiSwap] (Oct 19)

[https://cyberbump.net/make-your-crypto-work-harder-triple-stack-yields-on-sushi/ Make Your Crypto Work Harder: Triple-Stack Yields on Sushi] (Feb 18)

[https://www.coindesk.com/markets/2020/09/08/first-mover-sushiswaps-billion-dollar-rug-pull-is-thriller-to-crypto-geeks/ First Mover: SushiSwap's Billion-Dollar 'Rug Pull' Is Thriller to Crypto Geeks - CoinDesk] (Feb 18)

[https://www.defi.win/white-hats-just-defused-a-potential-350m-heist-on-sushiswap/ White Hats Just Defused a Potential $350M Heist on SushiSwap – Defi] (Feb 20)

← Older revision		Revision as of 21:57, 22 February 2023
Line 1:		Line 1:
	{{Imported Case Study\|source=https://www.quadrigainitiative.com/casestudy/sushiswapmisowhitehatdiffusal.php}}		{{Imported Case Study\|source=https://www.quadrigainitiative.com/casestudy/sushiswapmisowhitehatdiffusal.php}}
			{{Unattributed Sources}}

	[[File:Sushiswap.jpg\|thumb\|SushiSwap]]The SushiSwap MISO is a smart contract which assists with launching new coins and tokens which are managed through a smart contract hot wallet. The contract underwent 3 separate audits by reputable firms as well as multiple security researchers had reviewed it. And yet, there was still a bug found which would have been able to drain all $350m in funds.		[[File:Sushiswap.jpg\|thumb\|SushiSwap]]The SushiSwap MISO is a smart contract which assists with launching new coins and tokens which are managed through a smart contract hot wallet. The contract underwent 3 separate audits by reputable firms as well as multiple security researchers had reviewed it. And yet, there was still a bug found which would have been able to drain all $350m in funds.
Line 6:		Line 7:

	This is a global/international case not involving a specific country.		This is a global/international case not involving a specific country.
			<ref name="openblocksecgithub-2342" /><ref name="paradigm-3529" /><ref name="muditblog-3530" /><ref name="hackmd-3531" /><ref name="blocksecteamgithub-3532" /><ref name="adrianhetman-3527" /><ref name="googledrive-3533" /><ref name="sushiswapgithub-3534" /><ref name="googledrive-3535" /><ref name="instantmiso-3536" /><ref name="instantmiso-3537" /><ref name="coinmarketbag-3538" /><ref name="coindesk-3539" /><ref name="coingecko-899" /><ref name="gainsassociatesmedium-901" /><ref name="sushi-3867" /><ref name="cyberbump-6540" /><ref name="coindesk-6541" /><ref name="defidotwin-6563" />

	== About SushiSwap ==		== About SushiSwap ==
Line 120:		Line 122:

	== References ==		== References ==
	[https://github.com/openblocksec/blocksec-incidents/blob/main/defi/2021.md blocksec-incidents/2021.md at main · openblocksec/blocksec-incidents · GitHub] (Aug 10)		<references><ref name="openblocksecgithub-2342">[https://github.com/openblocksec/blocksec-incidents/blob/main/defi/2021.md blocksec-incidents/2021.md at main · openblocksec/blocksec-incidents · GitHub] (Aug 11, 2021)</ref>

	[https://www.paradigm.xyz/2021/08/two-rights-might-make-a-wrong/ Two Rights Might Make A Wrong - Paradigm] (Aug 28)		<ref name="paradigm-3529">[https://www.paradigm.xyz/2021/08/two-rights-might-make-a-wrong/ Two Rights Might Make A Wrong - Paradigm] (Aug 29, 2021)</ref>

	[https://mudit.blog/miso-war-room/ A peek inside the MISO war room - $350m incident response story \| Mudit Gupta's Blog] (Aug 28)		<ref name="muditblog-3530">[https://mudit.blog/miso-war-room/ A peek inside the MISO war room - $350m incident response story \| Mudit Gupta's Blog] (Aug 29, 2021)</ref>

	[https://hackmd.io/@353yQn6WTImF5o12LQXXfQ/Hy2ZDYFxF HackMD - Collaborative Markdown Knowledge Base] (Aug 28)		<ref name="hackmd-3531">[https://hackmd.io/@353yQn6WTImF5o12LQXXfQ/Hy2ZDYFxF HackMD - Collaborative Markdown Knowledge Base] (Aug 29, 2021)</ref>

	[https://github.com/blocksecteam/defi_poc/tree/main/sushi_MISO/exploit defi_poc/sushi_MISO/exploit at main · blocksecteam/defi_poc · GitHub] (Aug 28)		<ref name="blocksecteamgithub-3532">[https://github.com/blocksecteam/defi_poc/tree/main/sushi_MISO/exploit defi_poc/sushi_MISO/exploit at main · blocksecteam/defi_poc · GitHub] (Aug 29, 2021)</ref>

	[https://www.adrianhetman.com/monthly-defi-blood-bath-report-4/ Monthly DeFi Blood Bath Report #4] (Sep 27)		<ref name="adrianhetman-3527">[https://www.adrianhetman.com/monthly-defi-blood-bath-report-4/ Monthly DeFi Blood Bath Report #4] (Sep 28, 2021)</ref>

	[https://drive.google.com/file/d/1F9BSA9Q0WFv2LGL8AQuvzvxZllT2w4um/view SushiSwap_MISO_SmartContract_Report_Halborn_v1.pdf - Google Drive] (Sep 27)		<ref name="googledrive-3533">[https://drive.google.com/file/d/1F9BSA9Q0WFv2LGL8AQuvzvxZllT2w4um/view SushiSwap_MISO_SmartContract_Report_Halborn_v1.pdf - Google Drive] (Sep 28, 2021)</ref>

	[https://github.com/sushiswap/miso/tree/master/spec miso/spec at master · sushiswap/miso · GitHub] (Sep 27)		<ref name="sushiswapgithub-3534">[https://github.com/sushiswap/miso/tree/master/spec miso/spec at master · sushiswap/miso · GitHub] (Sep 28, 2021)</ref>

	[https://drive.google.com/file/d/1tcYBuKF5XUYTaMokvN5Om5Bg3_32huXR/view MISO Security Audit Report (merged) - HackMD.pdf - Google Drive] (Sep 27)		<ref name="googledrive-3535">[https://drive.google.com/file/d/1tcYBuKF5XUYTaMokvN5Om5Bg3_32huXR/view MISO Security Audit Report (merged) - HackMD.pdf - Google Drive] (Sep 28, 2021)</ref>

	[https://instantmiso.com/ MISO \| Minimal Initial SushiSwap Offering] (Sep 27)		<ref name="instantmiso-3536">[https://instantmiso.com/ MISO \| Minimal Initial SushiSwap Offering] (Sep 28, 2021)</ref>

	[https://instantmiso.gitbook.io/miso/ https://instantmiso.gitbook.io/miso/] (Sep 27)		<ref name="instantmiso-3537">[https://instantmiso.gitbook.io/miso/ https://instantmiso.gitbook.io/miso/] (Sep 28, 2021)</ref>

	[https://coinmarketbag.com/sushiswap-miso-dutch-auction-bug-350mn-saved/ Sushiswap Miso Dutch Auction Bug \| $350Mn Saved! \| CoinMarketBag] (Sep 27)		<ref name="coinmarketbag-3538">[https://coinmarketbag.com/sushiswap-miso-dutch-auction-bug-350mn-saved/ Sushiswap Miso Dutch Auction Bug \| $350Mn Saved! \| CoinMarketBag] (Sep 28, 2021)</ref>

	[https://www.coindesk.com/tech/2021/08/17/white-hats-just-defused-a-potential-350m-heist-on-sushiswap/ CoinDesk: Bitcoin, Ethereum, Crypto News and Price Data] (Sep 27)		<ref name="coindesk-3539">[https://www.coindesk.com/tech/2021/08/17/white-hats-just-defused-a-potential-350m-heist-on-sushiswap/ CoinDesk: Bitcoin, Ethereum, Crypto News and Price Data] (Sep 28, 2021)</ref>

	[https://www.coingecko.com/en/coins/sushi Sushi price, chart, market cap and info \| CoinGecko] (May 23)		<ref name="coingecko-899">[https://www.coingecko.com/en/coins/sushi Sushi price, chart, market cap and info \| CoinGecko] (May 24, 2021)</ref>

	[https://medium.com/gains-associates/the-rise-fall-and-rise-of-sushiswap-ca7753da067f The Rise Fall And Rise Of Sushiswap] (May 23)		<ref name="gainsassociatesmedium-901">[https://medium.com/gains-associates/the-rise-fall-and-rise-of-sushiswap-ca7753da067f The Rise Fall And Rise Of Sushiswap] (May 24, 2021)</ref>

	[https://sushi.com/ SushiSwap] (Oct 19)		<ref name="sushi-3867">[https://sushi.com/ SushiSwap] (Oct 20, 2021)</ref>

	[https://cyberbump.net/make-your-crypto-work-harder-triple-stack-yields-on-sushi/ Make Your Crypto Work Harder: Triple-Stack Yields on Sushi] (Feb 18)		<ref name="cyberbump-6540">[https://cyberbump.net/make-your-crypto-work-harder-triple-stack-yields-on-sushi/ Make Your Crypto Work Harder: Triple-Stack Yields on Sushi] (Feb 18, 2022)</ref>

	[https://www.coindesk.com/markets/2020/09/08/first-mover-sushiswaps-billion-dollar-rug-pull-is-thriller-to-crypto-geeks/ First Mover: SushiSwap's Billion-Dollar 'Rug Pull' Is Thriller to Crypto Geeks - CoinDesk] (Feb 18)		<ref name="coindesk-6541">[https://www.coindesk.com/markets/2020/09/08/first-mover-sushiswaps-billion-dollar-rug-pull-is-thriller-to-crypto-geeks/ First Mover: SushiSwap's Billion-Dollar 'Rug Pull' Is Thriller to Crypto Geeks - CoinDesk] (Feb 18, 2022)</ref>

	[https://www.defi.win/white-hats-just-defused-a-potential-350m-heist-on-sushiswap/ White Hats Just Defused a Potential $350M Heist on SushiSwap – Defi] (Feb 20)		<ref name="defidotwin-6563">[https://www.defi.win/white-hats-just-defused-a-potential-350m-heist-on-sushiswap/ White Hats Just Defused a Potential $350M Heist on SushiSwap – Defi] (Feb 20, 2022)</ref></references>