{"id":886998,"date":"2026-01-22T20:13:27","date_gmt":"2026-01-23T02:13:27","guid":{"rendered":"https:\/\/newsycanuse.com\/index.php\/2026\/01\/22\/layer-1-protocol-saga-temporarily-shuts-sagaevm-chain-after-7m-exploit\/"},"modified":"2026-01-22T20:13:27","modified_gmt":"2026-01-23T02:13:27","slug":"layer-1-protocol-saga-temporarily-shuts-sagaevm-chain-after-7m-exploit","status":"publish","type":"post","link":"https:\/\/newsycanuse.com\/index.php\/2026\/01\/22\/layer-1-protocol-saga-temporarily-shuts-sagaevm-chain-after-7m-exploit\/","title":{"rendered":"Layer-1 Protocol Saga Temporarily Shuts SagaEVM Chain After $7M Exploit"},"content":{"rendered":"<div>\n<div>\n            <main><\/p>\n<div>\n<div>\n<div>\n<p><img decoding=\"async\" src=\"https:\/\/cryptonews.com\/wp-content\/uploads\/2024\/01\/Cropped_Image-1-150x150.png\" alt>\n                    <\/p>\n<p>Crypto Reporter<\/p>\n<div>\n<p>Shalini Nagarajan<\/p>\n<div>\n<div>\n<p><img decoding=\"async\" src=\"https:\/\/cryptonews.com\/wp-content\/uploads\/2024\/01\/Cropped_Image-1-150x150.png\" alt>\n                <\/p>\n<div>\n<div>\n<p>Crypto Reporter<\/p>\n<p><span>Shalini Nagarajan<\/span><span class><img decoding=\"async\" src=\"https:\/\/cryptonews.com\/wp-content\/themes\/cryptonews\/images\/verification.svg\" alt=\"Verified\"><\/span>\n                    <\/p>\n<\/p><\/div>\n<div>\n<p>Part of the Team Since<\/p>\n<p>Jan 2024<\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/p><\/div>\n<div>\n<p>About Author<\/p>\n<p>Shalini is a crypto reporter who provides in-depth reports on daily developments and regulatory shifts in the cryptocurrency sector.<\/p>\n<\/p><\/div>\n<\/div><\/div>\n<\/p><\/div>\n<div>\n<p>Last updated:\u00a0<\/p>\n<p><time datetime=\"2026-01-22T05:33:34+00:00\">January 22, 2026<\/time>\n        <\/p>\n<\/p><\/div>\n<\/div>\n<p><img fetchpriority=\"high\" width=\"1200\" height=\"800\" src=\"https:\/\/cimg.co\/wp-content\/uploads\/2026\/01\/22052917\/1769059756-chatgpt-image-jan-22-2026-10_58_36-am_optimized.jpg\" alt=\"Saga\" decoding=\"async\"  ><\/p>\n<p>Layer-1 network Saga paused its SagaEVM chain after an <a href=\"https:\/\/medium.com\/sagaxyz\/sagaevm-security-incident-investigation-update-29a1d2a6b0cd\" target=\"_blank\">exploit that moved nearly $7m in tokens to Ethereum<\/a>, as the team works through an ongoing investigation.<\/p>\n<p>Saga said it stopped the chain at block height 6593800 after identifying a security incident on Jan. 21, and it has kept the network paused \u201cout of an abundance of caution\u201d while it validates the full impact and patches the weakness and reinforces the system.<\/p>\n<p>\u201cWe recognize that a pause is disruptive. We made this decision because the safety of our community comes first,\u201d the team said Wednesday in its blog. \u201cOnce remediation is complete, we will publish a more comprehensive technical post-mortem.\u201d<\/p>\n<figure>\n<div>\n<blockquote data-width=\"550\" data-dnt=\"true\">\n<div lang=\"en\" dir=\"ltr\">\n<p>SagaEVM remains paused while we finalize the results of our investigation into the Jan 21 exploit.<\/p>\n<p>We\u2019re working with partners on remediation and will publish a post-mortem once findings are fully validated. $7M of USDC was bridged out and converted to ETH.<\/p>\n<p>Extracted funds were\u2026<\/p>\n<\/div>\n<p>\u2014 Saga \u26cb (@Sagaxyz__) <a href=\"https:\/\/twitter.com\/Sagaxyz__\/status\/2014144936631738532?ref_src=twsrc%5Etfw\" target=\"_blank\">January 22, 2026<\/a><\/p><\/blockquote>\n<\/div>\n<\/figure>\n<h2><span id=\"h-saga-identifies-wallet-linked-to-7m-exploit\">Saga Identifies Wallet Linked To $7M Exploit<\/span><\/h2>\n<p>In its investigation update, Saga said nearly $7M in USDC, yUSD, ETH, and tBTC were transferred to the <a href=\"https:\/\/cryptonews.com\/coins\/ethereum\/\">Ethereum<\/a> Mainnet, and it identified the wallet it was extracted to. <\/p>\n<p>The team said it is coordinating with exchanges and bridge operators to blacklist the attacker\u2019s address and support recovery efforts, while it continues forensic analysis using archive data and execution traces.<\/p>\n<p>Saga described the attack as a coordinated sequence involving contract deployments and cross-chain activity that ended in rapid liquidity withdrawals. <\/p>\n<h2><span id=\"h-chainalysis-estimates-3-4b-in-crypto-theft-in-2025\">Chainalysis Estimates $3.4B In Crypto Theft In 2025<\/span><\/h2>\n<p>Reports on the incident also said the attacker bridged assets to Ethereum and converted proceeds into ETH via swaps.<\/p>\n<p>Saga said the incident affected the SagaEVM chainlet along with Colt and Mustang, but it did not affect the Saga SSC mainnet, the protocol\u2019s consensus, validator security, or other Saga chainlets. It also said it found no evidence of validator compromise, signer key leakage, or consensus failure.<\/p>\n<p>The breach lands as crypto security remains under pressure. C<a href=\"https:\/\/www.chainalysis.com\/blog\/crypto-hacking-stolen-funds-2026\/#:~:text=The%20cryptocurrency%20industry%20witnessed%20over,the%20composition%20of%20these%20thefts.\" target=\"_blank\">hainalysis estimated the industry saw over $3.4B in theft in 2025<\/a>, and pointed to large, concentrated hacks as a key driver of losses.<\/p>\n<p>\n                                    <a href=\"https:\/\/news.google.com\/publications\/CAAqKQgKIiNDQklTRkFnTWFoQUtEbU55ZVhCMGIyNWxkM011WTI5dEtBQVAB?ceid=US:en&#038;oc=3\" target=\"_blank\"><\/p>\n<p>                            <svg width=\"20\" height=\"16\" viewBox=\"0 0 20 16\" fill=\"none\">\n                            <path d=\"M19.6 5.36C19.6 5.48 19.6 5.66 19.54 5.78L17.2 12.8V5.6C17.2 4.94 16.66 4.4 16 4.4H12.82L12.52 3.8L11.86 2.36L15.34 3.32L18.58 4.16C19.18 4.28 19.6 4.82 19.6 5.36Z\" fill=\"#FF4131\" \/>\n                            <path d=\"M15.4 0.799997V3.26L11.92 2.3L11.74 1.88C11.44 1.28 10.72 0.979997 10.12 1.22L4.59998 3.38V0.799997C4.59998 0.499997 4.89998 0.199997 5.19998 0.199997H14.8C15.1 0.199997 15.4 0.499997 15.4 0.799997Z\" fill=\"#03A846\" \/>\n                            <path d=\"M12.82 4.4H4.00002C3.34002 4.4 2.80002 4.94 2.80002 5.6V11.42L0.520024 6.5C0.460024 6.26 0.400024 6.08 0.400024 5.9V5.84C0.400024 5.3 0.700024 4.82 1.24002 4.64L4.60002 3.32L10.06 1.22C10.72 0.979997 11.44 1.28 11.68 1.88L11.86 2.3L12.52 3.74L12.82 4.4Z\" fill=\"#FDBD04\" \/>\n                            <path d=\"M17.2 5.59999V14.6C17.2 15.26 16.66 15.8 16 15.8H4.00005C3.34005 15.8 2.80005 15.26 2.80005 14.6V5.59999C2.80005 4.93999 3.34005 4.39999 4.00005 4.39999H16C16.66 4.39999 17.2 4.93999 17.2 5.59999ZM9.40005 9.79999H7.00005V11H7.90005C7.60005 11.36 7.18005 11.6 6.70005 11.6C5.86005 11.6 5.20005 10.94 5.20005 10.1C5.20005 9.25999 5.86005 8.59999 6.70005 8.59999C7.12005 8.59999 7.48005 8.77999 7.78005 9.01999L8.62005 8.17999C8.14005 7.69999 7.48005 7.39999 6.70005 7.39999C5.20005 7.39999 4.00005 8.59999 4.00005 10.1C4.00005 11.6 5.20005 12.8 6.70005 12.8C7.90005 12.8 8.86005 12.08 9.22005 11C9.34005 10.7 9.40005 10.4 9.40005 10.1C9.40005 9.97999 9.40005 9.91999 9.40005 9.79999ZM14.8 7.39999H10.6V8.59999H14.8V7.39999ZM16 9.79999H10.6V11H16V9.79999ZM14.8 12.2H10.6V13.4H14.8V12.2Z\" fill=\"#0284FE\" \/>\n                            <\/svg><br \/>\n                                                                    Follow us on Google News                                    <\/a>\n                                <\/p>\n<\/p><\/div>\n<p>            <\/main><\/p><\/div>\n<div>\n<div>\n<h2>More Articles<\/h2>\n<\/p><\/div>\n<div>\n<div>\n<p><img decoding=\"async\" src=\"https:\/\/cryptonews.com\/wp-content\/uploads\/2024\/01\/Cropped_Image-1-150x150.png\" alt>\n        <\/p>\n<p>\n            Shalini Nagarajan            <span><\/span>\n        <\/p>\n<p>Crypto Reporter<\/p>\n<\/p><\/div>\n<p>\n        Shalini is a crypto reporter who provides in-depth reports on daily developments and regulatory shifts in the cryptocurrency sector.    <\/p>\n<\/div>\n<div>\n<div>\n<p><img decoding=\"async\" src=\"https:\/\/cimg.co\/p\/2\/crypto-news-logo-full.svg\" alt=\"Crypto News\"><br \/>\n            <span>in numbers<\/span>\n        <\/p>\n<div>\n<p><img decoding=\"async\" src=\"https:\/\/cimg.co\/wp-content\/uploads\/2026\/01\/20130639\/teamphotos-new.png\" alt=\"editors\">\n            <\/p>\n<\/p><\/div>\n<\/p><\/div>\n<div>\n<div>\n<p>2M+<\/p>\n<p>Active Monthly Users Around the World<\/p>\n<\/p><\/div>\n<div>\n<p>250+<\/p>\n<p>Guides and Reviews Articles<\/p>\n<\/p><\/div>\n<div>\n<p>70<\/p>\n<p>International Team Authors<\/p>\n<\/p><\/div>\n<\/p><\/div>\n<\/div>\n<div>\n<p>Get dialed in every Tuesday &#038; Friday with quick updates on the world of crypto<\/p>\n<p>\n        Enter your email for our free Newsletter    <\/p>\n<div>\n<p>\n    This site is protected by reCAPTCHA and the <a href=\"https:\/\/policies.google.com\/privacy\">Google Privacy Policy<\/a> and <a href=\"https:\/\/policies.google.com\/terms\">Terms of Service<\/a> apply.\n    <\/p>\n<\/div>\n<\/div><\/div>\n<\/p><\/div>\n<p><a href=\"https:\/\/cryptonews.com\/news\/saga-temporarily-shuts-sagaevm-chain-7m-exploit\/\" class=\"button purchase\" rel=\"nofollow noopener\" target=\"_blank\">Read More<\/a><br \/>\n Margherita Redner<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Crypto Reporter Shalini Nagarajan Crypto Reporter Shalini Nagarajan Part of the Team Since Jan 2024 About Author Shalini is a crypto reporter who provides in-depth reports on daily developments and regulatory shifts in the cryptocurrency sector. Last updated:\u00a0 January 22, 2026 Layer-1 network Saga paused its SagaEVM chain after an exploit that moved nearly $7m<\/p>\n","protected":false},"author":1,"featured_media":886999,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[41601,25880],"tags":[],"class_list":{"0":"post-886998","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-layer","8":"category-protocol"},"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/posts\/886998","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/comments?post=886998"}],"version-history":[{"count":0,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/posts\/886998\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/media\/886999"}],"wp:attachment":[{"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/media?parent=886998"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/categories?post=886998"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/newsycanuse.com\/index.php\/wp-json\/wp\/v2\/tags?post=886998"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}