What happened
On January 21, 2026, Saga identified a security incident affecting SagaEVM. The chainlet was paused after nearly $7M in USDC, yUSD, ETH, and tBTC was transferred to Ethereum mainnet.
Case & protocol details
Classification
Protocol Logic / Other / Token & Share Accounting
Protocol Type
Chain
Smart Contract Language
Solidity
Official Website
www.saga.xyz/
Protocol Twitter/X
@Sagaxyz__
Attack Timeline
Saga described a coordinated sequence of contract deployments, cross-chain activity, and liquidity withdrawals. Its immediate response was to pause SagaEVM, restrict relevant cross-chain activity, and investigate with archive data and execution traces.
Evidence & learning
Sources and on-chain records
- report Report x.com
- report Post-mortem medium.com
- analysis Website reference x.com
- analysis Website reference x.com
Practice this exploit pattern safely
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.