Saga: SagaEVM Security Incident Occurred and Has Been Paused, Approximately $7 Million in Assets Transferred to Ethereum Mainnet

Odaily News: Saga announced that a security incident was discovered on SagaEVM on January 21. The chain's operation has currently been paused at block height 6,593,800, and an investigation and response are underway.

Saga stated that this incident involved a series of contract deployments, cross-chain operations, and subsequent liquidity transfers. Out of security concerns, the team will keep SagaEVM paused until the investigation and mitigation measures are completed. The current priorities include: preventing further impact, verifying the scope of impact through archived data and execution traces, strengthening relevant components before restarting, and only disclosing confirmed facts externally.

Regarding the scope of impact, the affected entities are the SagaEVM chainlet and its Colt and Mustang components; unaffected parts include the Saga SSC mainnet, Saga protocol consensus, validator security, and other Saga chainlets. The announcement stated that approximately $7 million worth of USDC, yUSD, ETH, and tBTC were transferred to the Ethereum mainnet. The relevant attack addresses have been identified, and Saga is collaborating with exchanges and cross-chain bridges to blacklist these addresses and attempt to recover the assets.

Saga emphasized that this incident did not involve a consensus failure, validator compromise, or signature key leakage, and the overall structure of the Saga network remains secure. Subsequently, the team will release a comprehensive technical post-mortem report after confirming the root cause, fixing, and strengthening the affected components.