SushiSwap’s token platform, Miso, was hit with a supply chain attack that landed the attacker more than $3 million worth of Ethereum. Malicious code was injected into the platform’s frontend by a contractor who submitted a pull request. The attacker was able to target a car-themed NFT auction called “Jay Pegs Auto Mart”. However, the team discovered the identity of the attacker and the funds were returned after some legal threats.

Total loss estimated at $3,000,000.