Permission Verification Vulnerability: Analysis of SushiSwap Attack Incident

Beijing time April 9, 2023, SushiSwap 's RouteProcessor2 contract had a permission verification vulnerability, with attackers profiting approximately $3.3 million. SharkTeam conducted a technical analysis of this incident immediately and summarized security prevention measures, hoping that future projects can learn from this and jointly build security defenses for the blockchain industry. 1. Incident This attack involved multiple transactions, and we analyze one transaction as an example.