BlockSec: SushiSwap's KashiPairMediumRiskV1 contract has a logical loophole, and follow-up remedies and compensation measures are now provided

BlockSec stated that SushiSwap’s KashiPairMediumRiskV1 contract suffered two attacks due to a logic loophole, which resulted in miscalculation of token prices and asset losses. The Sushi team then took action to "protect some valuable but vulnerable pools from attack" and "provide procedures to compensate users who lost funds due to the bug". BlockSec reminds that dozens of fund pools built on Ethereum and BNB Chain may be affected by this vulnerability. The temporary solution to this problem is to occasionally or periodically call the UpdateExchangeRate function to reduce or eliminate the deviation.