- The striker has exploited the faults of intelligent contracts in Cetus.
- Cetus is the largest DEX aggregator in Su.
- Several tokens based on sui have crashed due to the feat.
The Blockchain Suis is in shock from a major feat that affected one of its greatest protocols.
Cetus, the largest decentralized exchange aggregator on Su sur Violation on Thursday, underwent a security violation that led to a 220 million dollars flight. The attacker has exploited faults in intelligent protocol contracts to drain the funds.
While Cetus said that he had acted quickly to avoid the attack and had interrupted his intelligent contracts to avoid new losses, the incident caused the fall of the value of several SUP tokens, including Lofi, which crushed 76%, and Hippo, which dropped 81%.
How they did it
The attacker managed to achieve the feat by taking advantage of the faults of Cetus intelligent contracts. They sent parody tokens to Cetus who had no market value.
Vulnerabilities in Cetus’ intelligent contracts allowed the attacker to deceive the protocol to behave like the tokens were precious. The attacker used these tokens without value to distort price data on Cetus and drain the liquidity pools of the protocol.
“Imagine to go to an exchange of toys, you bring false toys that seem precious but which are in fact without value, then you exchange them for real toys and run,” said Manan Vora, director of Liminal, a Crypto guard company, published on LinkedIn in reaction to the incident.
“This is essentially what just happened on suis.”
Since the liquidity pools are critical cryptocurrency reservations on exchanges that allow traders to exchange tokens, and Cetus is the biggest Dex sur Su, the attack caused a crushing of several tokens on the network.
USDC Stablecoin sur Suis spent at zero after the attack.
The attack also had a significant impact on the DEFI DEFI ecosystem, the total assets held by network investors falling from more than $ 330 million on Thursday.
The total of Cetus of Cetus owned on the protocol also underwent a massive drop of 84% Thursday to 38 million dollars.
Cetus reaction
The Cetus team reported that thanks to its recovery efforts, it frozen $ 160 million in symplas funds and is working to return it to the protocol.
Cetus said on X: “We are working with the SUP foundation and other members of the ecosystem at the moment on solutions to come in order to recover the remaining stolen funds.”
The Foundation Suis added: “A large number of validators have identified the addresses with the stolen funds and ignore transactions on these addresses until further notice.”
The validators are the backbone of blockchains like sui because they check the transactions and apply the rules of the protocol. By ignoring the transactions associated with hacking, validators actually adopt censorship based on consensus similar to freezing bank accounts in traditional finance.
However, the striker managed to extract more than $ 60 million from the feat. Onchain’s data show that the funds have been transferred to the Ethereum blockchain and exchanged against USDC Stablecoin. The striker’s portfolio has even more than $ 37 million in assets.
Cetus’ security violation is the largest hack DEFI in 2025, a year which also set the record for the largest crypto hack of $ 1.4 billion by Bybit Crypto Exchange.
Osato Avan-Nomayo is our DEFI correspondent based in Nigeria. It covers Defi and Tech. Do you have a tip? Please contact him at Osato@dlnews.com.
