Scallop exploit drains ~150K SUI from sSUI rewards pool

Scallop, a lending protocol native to the SUI ecosystem, suffered an exploit targeting its sSUI rewards pool, with approximately 150,000 SUI drained in the attack. The protocol has since resumed normal operations and confirmed it will cover 100% of the loss from its own resources.

The pledge to make users whole is a meaningful signal — rewards pool exploits often leave LPs in limbo — but the incident adds to a growing list of DeFi lending vulnerabilities tied to staking derivative mechanics. For SUI, which has positioned its DeFi layer as a high-performance alternative, the timing is a setback to that narrative.

No further details on the attack vector have been disclosed publicly at this stage.