Home Fear & Greed Pools Wallets Dictionary Advertise Facebook Twitter Telegram Reddit Youtube
Market Cap:
24h Vol:
Cryptocurrencies: 13285
Markets: 101961
CoinInsight360.com logo CoinInsight360.com logo
ENG
EST
RUS
TUR
DEU
CHI
KOR
ITA
USD
USD
AED
AFN
ALL
AMD
ANG
AOA
ARS
AUD
AWG
AZN
BAM
BBD
BDT
BGN
BHD
BIF
BMD
BND
BOB
BRL
BTN
BWP
BYN
BZD
CAD
CDF
CHF
CLF
CLP
CNH
CNY
COP
CRC
CUC
CUP
CVE
CZK
DJF
DKK
DOP
DZD
EGP
ERN
ETB
EUR
FJD
FKP
GBP
GEL
GHS
GIP
GMD
GNF
GTQ
GYD
HKD
HNL
HRK
HTG
HUF
IDR
ILS
IMP
INR
ISK
JMD
JOD
JPY
KES
KGS
KHR
KMF
KPW
KRW
KWD
KYD
KZT
LAK
LBP
LKR
LRD
LSL
LYD
MAD
MDL
MGA
MKD
MMK
MNT
MOP
MRU
MUR
MVR
MWK
MXN
MYR
MZN
NAD
NGN
NIO
NOK
NPR
NZD
OMR
PAB
PEN
PGK
PHP
PKR
PLN
PYG
QAR
RON
RSD
RUB
RWF
SAR
SBD
SCR
SDG
SEK
SGD
SHP
SLL
SRD
SSP
STD
STN
SVC
SYP
SZL
THB
TJS
TMT
TND
TOP
TRY
TTD
TWD
TZS
UAH
UGX
UYU
UZS
VES
VND
VUV
WST
ZAR
ZMW
ZWL
America's Social Casino

Market Cap
24h Vol
13285
Cryptocurrencies
62.63%
Bitcoin Share
crypto.news 2025-05-27 06:46:15

Cetus DEX releases post-mortem, outlines recovery plan following $223M exploit

Cetus DEX releases post-mortem, outlines recovery plan following $223M exploit

Cetus, a leading decentralized exchange on the Sui network, has published a detailed post-mortem report following a $223 million exploit that targeted its concentrated liquidity market maker pools on May 22. In its May 26 incident report , Cetus explained that the attack was caused by a vulnerability in an open-source library used in its smart contracts. The hacker exploited a flaw in the platform’s liquidity management system, which controls how users add and remove tokens from trading pools. The attacker used a feature called a flash swap, a kind of instant loan that lets users borrow tokens as long as they pay them back in the same transaction. Flash swaps were used to distort pool prices, add fake liquidity using only a small number of tokens, and then withdraw large amounts of real tokens over several rounds, draining multiple pools in the process. Cetus explained that the root of the problem was an error in a third-party code library, where the system incorrectly checked for potential overflows, meaning it didn’t properly limit extremely large numbers. “This issue has nothing to do with the MAX_U64 arithmetic bug flagged in previous audits,” Cetus clarified, addressing community confusion. “The root cause was a faulty left-shift overflow check that incorrectly validated values beyond safe limits.” You might also like: Sui-based Haedal Protocol suspends haeVault feature following Cetus’ $223m exploit The Cetus team detected strange activity within 10 minutes of the hack and quickly paused trading. They also contacted Sui ( SUI ) validators who voted to freeze the attacker’s wallets. This action stopped roughly $162 million of stolen funds from being moved off the network. However, the rest was already bridged to Ethereum ( ETH ). Cetus said it will now re-audit its contracts, improve its monitoring systems, and roll out a plan to help users recover lost funds. It’s also working with ecosystem partners on a liquidity recovery plan and has urged Sui validators to support on-chain votes aimed at helping users recover funds. The incident caused a drop in total value locked on the Sui network, from $2.13 billion to around $1.92 billion. CETUS, the platform’s token, fell by 40%, and the loss of liquidity briefly caused USD Coin ( USDC ) to lose its dollar peg. Some community members praised the quick response from Sui validators, while others raised concerns that the ability to freeze wallets shows a lack of decentralization. Cetus has also reached out to the hacker with a $6 million “white hat” bounty , inviting them to return the funds, keep the reward, and avoid legal action. Read more: Cetus offers $5m reward for info on hacker

Most Read News

Moralis Money
Market Cap
24h Vol
62.63%
Bitcoin Share
655
Today News
Read the Disclaimer : All content provided herein our website, hyperlinked sites, associated applications, forums, blogs, social media accounts and other platforms (“Site”) is for your general information only, procured from third party sources. We make no warranties of any kind in relation to our content, including but not limited to accuracy and updatedness. No part of the content that we provide constitutes financial advice, legal advice or any other form of advice meant for your specific reliance for any purpose. Any use or reliance on our content is solely at your own risk and discretion. You should conduct your own research, review, analyse and verify our content before relying on them. Trading is a highly risky activity that can lead to major losses, please therefore consult your financial advisor before making any decision. No content on our Site is meant to be a solicitation or offer.