SashimiSwap was exploited via improper swap and router architectural design. An attacker used a 400 ETH flash loan to create fraudulent token pairings with liquidity, then exploited the UniswapRouter contract's swap logic to extract value. The attack was initiated on December 30, 2021 at 09:06 UTC, resulting in approximately $210K in losses.

SashimiSwap was attacked due to a logic error in the swap function, and the attacker finally made a profit: 6,261.304 uni, 4,466,096 Sashimi and 63,762 usdt, nearly $200,000.