{"id":481523,"date":"2025-05-22T15:23:49","date_gmt":"2025-05-22T14:23:49","guid":{"rendered":"https:\/\/cryptoslate.com\/?p=481523"},"modified":"2025-05-22T16:24:01","modified_gmt":"2025-05-22T15:24:01","slug":"sui-based-cetus-protocol-suspends-operations-following-260-million-oracle-exploit","status":"publish","type":"post","link":"https:\/\/cryptoslate.com\/sui-based-cetus-protocol-suspends-operations-following-260-million-oracle-exploit\/","title":{"rendered":"Sui-based Cetus Protocol suspends operations following $223 million oracle exploit"},"content":{"rendered":"

Update: Cetus has stated that the loss currently stands at $223 million<\/a>.\u00a0<\/em><\/p>\n

“As of earlier today, we have confirmed that an attacker has stolen approximately $223M from Cetus Protocol. <\/em><\/p>\n

We have took immediate action to lock our contract preventing further theft of funds. $162M of the compromised funds have been successfully paused. <\/em><\/p>\n

We are working with the Sui Foundation and other ecosystem members right now on next-step solutions, with the goal of recovering the remaining stolen funds.<\/em>“<\/em><\/p><\/blockquote>\n

Cetus<\/a> Protocol, a decentralized exchange (DEX) operating on the Sui<\/a> Network, has suspended its smart contract operations after a serious security breach.<\/p>\n

The platform confirmed<\/a> the exploit on May 22 through its official X account, noting that the shutdown was necessary to prevent further fund loss, stating,<\/p>\n

“\ud83d\udea8Alert Announcement \ud83d\udea8<\/p>\n

There was an incident detected on our protocol and our smart contract has been paused temporarily for safety. The team is investigating the incident at the moment. A further investigation statement will be made soon. We are grateful for your patience.”<\/p><\/blockquote>\n

Blockchain analytics firm Lookonchain revealed<\/a> that the attacker drained over $260 million from the protocol. The stolen assets are reportedly being swapped into USDC<\/a> and bridged to Ethereum<\/a>, where they are exchanged for ETH.<\/p>\n

Lookonchain reported that approximately $60 million in USDC had already been transferred across chains at the time of reporting.<\/p>\n

Data<\/a> from DeFiLlama supports this, showing a steep drop in the platform's total value locked (TVL), which fell by more than $200 million to around $75 million.<\/p>\n

Meanwhile, Cetus Protocol's native token, CETUS, plunged over 24% to $0.15 as of press time, according to CryptoSlate's<\/em> data.<\/p>\n

The exploit also triggered a broader selloff in the Sui ecosystem<\/a>, with seven out of 11 Sui-based tokens tracked by CryptoSlate<\/em> registering losses of around 5% or more.<\/p>\n

Rosco Kalis, the founder of Revoke Cash, pointed out<\/a>:<\/p>\n

\n

“The stolen funds mostly belonged to the LPs of the DEX. But this also caused a lot of Sui token prices to crash, affected normal users as well. The SUI token itself seems to be holding up relatively fine so far though, only down slightly for the day.”<\/p>\n<\/blockquote>\n

How Cetus was exploited<\/h2>\n

Early analysis suggests the exploit may be linked to a flaw in the protocol's pricing mechanism.<\/p>\n

Alex Horlan, CTO of web3 security firm HackenProof, explained<\/a> that the attacker likely used a near-zero liquidity injection to manipulate the pools' internal state. This allowed them to extract valuable SUI and USDC tokens without contributing real assets.<\/p>\n

He added that the team needs to:<\/p>\n

\n

“Check the math behind addLiquidity, removeLiquidity, and swap functions \u2014 especially where they Compute token ratios, Round small values, and Handle tokens with decimals = 0.”<\/p>\n<\/blockquote>\n

Earlier today, a member of the Cetus team posted to Discord that the platform was “not hacked, we've detected a bug in the oracle.” The general consensus among Crypto Twitter now appears to support oracle manipulation as the cause of the exploit.<\/p>\n

Cetus Protocol employs a dual approach to oracles within its ecosystem:<\/span><\/p>\n

Internal oracle via concentrated liquidity pools:<\/strong> Cetus's concentrated liquidity pools<\/a> serve as an on-chain oracle by providing real-time liquidity data and historical price information. This mechanism allows external developers and platforms to access accurate market data derived directly from actual trading activities, reducing reliance on off-chain data sources, and is supposed to minimize risks associated with oracle manipulation.<\/p>\n

Integration with Pyth Network:<\/strong> Cetus also contributes its decentralized exchange (DEX) price data to the Pyth Network<\/a>, a decentralized oracle solution.<\/p>\n

As of press time, Pyth Network has\u00a0<\/span>not commented<\/a> on the incident, so it is\u00a0<\/span>unclear whether the pricing issue originated from the on-chain oracles or Pyth.<\/p>\n

Despite the unsavory incident, the project has received support<\/a> from the broader crypto community. Binance<\/a> founder and former CEO Changpeng Zhao<\/a> noted<\/a> that his team has reached out to help Cetus resolve the situation.<\/p>\n","protected":false},"excerpt":{"rendered":"

Update: Cetus has stated that the loss currently stands at $223 million.\u00a0 “As of earlier today, we have confirmed that an attacker has stolen approximately $223M from Cetus Protocol. We have took immediate action to lock our contract preventing further theft of funds. $162M of the compromised funds have been successfully paused. We are working […]<\/p>\n","protected":false},"author":720,"featured_media":481526,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[76799,77968,16041,77494],"tags":[80252,78525],"post_folder":[],"acf":[],"yoast_head":"\nSui-based Cetus Protocol suspends operations following $223 million oracle exploit<\/title>\n<meta name=\"description\" content=\"Sui-based Cetus Protocol halts operations to protect users as attackers exploit pricing flaws that resulted in over $200 million loss.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/cryptoslate.com\/sui-based-cetus-protocol-suspends-operations-following-260-million-oracle-exploit\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Sui-based Cetus Protocol suspends operations following $223 million oracle exploit\" \/>\n<meta property=\"og:description\" content=\"Sui-based Cetus Protocol halts operations to protect users as attackers exploit pricing flaws that resulted in over $200 million loss.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/cryptoslate.com\/sui-based-cetus-protocol-suspends-operations-following-260-million-oracle-exploit\/\" \/>\n<meta property=\"og:site_name\" content=\"CryptoSlate\" \/>\n<meta property=\"article:published_time\" content=\"2025-05-22T14:23:49+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-05-22T15:24:01+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2025\/05\/hack-breach.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"630\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Oluwapelumi Adejumo\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@cryptoslate\" \/>\n<meta name=\"twitter:site\" content=\"@cryptoslate\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Oluwapelumi Adejumo\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"NewsArticle\",\"@id\":\"https:\/\/cryptoslate.com\/sui-based-cetus-protocol-suspends-operations-following-260-million-oracle-exploit\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/cryptoslate.com\/sui-based-cetus-protocol-suspends-operations-following-260-million-oracle-exploit\/\"},\"author\":{\"name\":\"Oluwapelumi Adejumo\",\"@id\":\"https:\/\/cryptoslate.com\/#\/schema\/person\/b333928a322ba4c082e8bb2ad0f14eb6\"},\"headline\":\"Sui-based Cetus Protocol suspends operations following $223 million oracle exploit\",\"datePublished\":\"2025-05-22T14:23:49+00:00\",\"dateModified\":\"2025-05-22T15:24:01+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/cryptoslate.com\/sui-based-cetus-protocol-suspends-operations-following-260-million-oracle-exploit\/\"},\"wordCount\":637,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/cryptoslate.com\/#organization\"},\"keywords\":[\"Cetus\",\"Sui\"],\"articleSection\":[\"Crime\",\"Featured\",\"Hacks\",\"Outage\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/cryptoslate.com\/sui-based-cetus-protocol-suspends-operations-following-260-million-oracle-exploit\/#respond\"]}],\"copyrightYear\":\"2025\",\"copyrightHolder\":{\"@id\":\"https:\/\/cryptoslate.com\/#organization\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/cryptoslate.com\/sui-based-cetus-protocol-suspends-operations-following-260-million-oracle-exploit\/\",\"url\":\"https:\/\/cryptoslate.com\/sui-based-cetus-protocol-suspends-operations-following-260-million-oracle-exploit\/\",\"name\":\"Sui-based Cetus Protocol suspends operations following $223 million oracle exploit\",\"isPartOf\":{\"@id\":\"https:\/\/cryptoslate.com\/#website\"},\"datePublished\":\"2025-05-22T14:23:49+00:00\",\"dateModified\":\"2025-05-22T15:24:01+00:00\",\"description\":\"Sui-based Cetus Protocol halts operations to protect users as attackers exploit pricing flaws that resulted in over $200 million loss.\",\"breadcrumb\":{\"@id\":\"https:\/\/cryptoslate.com\/sui-based-cetus-protocol-suspends-operations-following-260-million-oracle-exploit\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/cryptoslate.com\/sui-based-cetus-protocol-suspends-operations-following-260-million-oracle-exploit\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/cryptoslate.com\/sui-based-cetus-protocol-suspends-operations-following-260-million-oracle-exploit\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/cryptoslate.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Sui-based Cetus Protocol suspends operations following $223 million oracle exploit\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/cryptoslate.com\/#website\",\"url\":\"https:\/\/cryptoslate.com\/\",\"name\":\"CryptoSlate\",\"description\":\"Cryptocurrency News and Real-time Coin Data\",\"publisher\":{\"@id\":\"https:\/\/cryptoslate.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/cryptoslate.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/cryptoslate.com\/#organization\",\"name\":\"CryptoSlate\",\"url\":\"https:\/\/cryptoslate.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cryptoslate.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2018\/05\/c-logo.jpg\",\"contentUrl\":\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2018\/05\/c-logo.jpg\",\"width\":1000,\"height\":1000,\"caption\":\"CryptoSlate\"},\"image\":{\"@id\":\"https:\/\/cryptoslate.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/twitter.com\/cryptoslate\",\"https:\/\/www.instagram.com\/cryptoslate\/\",\"https:\/\/www.linkedin.com\/company\/cryptoslate\/\",\"https:\/\/www.youtube.com\/c\/cryptoslate\",\"https:\/\/cryptoslate.substack.com\/\",\"https:\/\/t.me\/cryptoslatenews\"],\"publishingPrinciples\":\"https:\/\/cryptoslate.com\/editorial-policy\/\",\"ownershipFundingInfo\":\"https:\/\/cryptoslate.com\/about\/\",\"actionableFeedbackPolicy\":\"https:\/\/cryptoslate.com\/about\/\",\"correctionsPolicy\":\"https:\/\/cryptoslate.com\/about\/\",\"ethicsPolicy\":\"https:\/\/cryptoslate.com\/disclaimers\/\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/cryptoslate.com\/#\/schema\/person\/b333928a322ba4c082e8bb2ad0f14eb6\",\"name\":\"Oluwapelumi Adejumo\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/cryptoslate.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2025\/12\/profile-photo-oluwapelumi-adejumo-150x150.jpg\",\"contentUrl\":\"https:\/\/cryptoslate.com\/wp-content\/uploads\/2025\/12\/profile-photo-oluwapelumi-adejumo-150x150.jpg\",\"caption\":\"Oluwapelumi Adejumo\"},\"description\":\"Oluwapelumi values Bitcoin's potential. He imparts insights on a range of topics like DeFi, hacks, mining and culture, underlining transformative power.\",\"jobTitle\":\"Reporter\",\"worksFor\":\"CryptoSlate\",\"url\":\"https:\/\/cryptoslate.com\/author\/oluwapelumi-adejumo\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Sui-based Cetus Protocol suspends operations following $223 million oracle exploit","description":"Sui-based Cetus Protocol halts operations to protect users as attackers exploit pricing flaws that resulted in over $200 million loss.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/cryptoslate.com\/sui-based-cetus-protocol-suspends-operations-following-260-million-oracle-exploit\/","og_locale":"en_US","og_type":"article","og_title":"Sui-based Cetus Protocol suspends operations following $223 million oracle exploit","og_description":"Sui-based Cetus Protocol halts operations to protect users as attackers exploit pricing flaws that resulted in over $200 million loss.","og_url":"https:\/\/cryptoslate.com\/sui-based-cetus-protocol-suspends-operations-following-260-million-oracle-exploit\/","og_site_name":"CryptoSlate","article_published_time":"2025-05-22T14:23:49+00:00","article_modified_time":"2025-05-22T15:24:01+00:00","og_image":[{"width":1200,"height":630,"url":"https:\/\/cryptoslate.com\/wp-content\/uploads\/2025\/05\/hack-breach.jpg","type":"image\/jpeg"}],"author":"Oluwapelumi Adejumo","twitter_card":"summary_large_image","twitter_creator":"@cryptoslate","twitter_site":"@cryptoslate","twitter_misc":{"Written by":"Oluwapelumi Adejumo","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"NewsArticle","@id":"https:\/\/cryptoslate.com\/sui-based-cetus-protocol-suspends-operations-following-260-million-oracle-exploit\/#article","isPartOf":{"@id":"https:\/\/cryptoslate.com\/sui-based-cetus-protocol-suspends-operations-following-260-million-oracle-exploit\/"},"author":{"name":"Oluwapelumi Adejumo","@id":"https:\/\/cryptoslate.com\/#\/schema\/person\/b333928a322ba4c082e8bb2ad0f14eb6"},"headline":"Sui-based Cetus Protocol suspends operations following $223 million oracle exploit","datePublished":"2025-05-22T14:23:49+00:00","dateModified":"2025-05-22T15:24:01+00:00","mainEntityOfPage":{"@id":"https:\/\/cryptoslate.com\/sui-based-cetus-protocol-suspends-operations-following-260-million-oracle-exploit\/"},"wordCount":637,"commentCount":0,"publisher":{"@id":"https:\/\/cryptoslate.com\/#organization"},"keywords":["Cetus","Sui"],"articleSection":["Crime","Featured","Hacks","Outage"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/cryptoslate.com\/sui-based-cetus-protocol-suspends-operations-following-260-million-oracle-exploit\/#respond"]}],"copyrightYear":"2025","copyrightHolder":{"@id":"https:\/\/cryptoslate.com\/#organization"}},{"@type":"WebPage","@id":"https:\/\/cryptoslate.com\/sui-based-cetus-protocol-suspends-operations-following-260-million-oracle-exploit\/","url":"https:\/\/cryptoslate.com\/sui-based-cetus-protocol-suspends-operations-following-260-million-oracle-exploit\/","name":"Sui-based Cetus Protocol suspends operations following $223 million oracle exploit","isPartOf":{"@id":"https:\/\/cryptoslate.com\/#website"},"datePublished":"2025-05-22T14:23:49+00:00","dateModified":"2025-05-22T15:24:01+00:00","description":"Sui-based Cetus Protocol halts operations to protect users as attackers exploit pricing flaws that resulted in over $200 million loss.","breadcrumb":{"@id":"https:\/\/cryptoslate.com\/sui-based-cetus-protocol-suspends-operations-following-260-million-oracle-exploit\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/cryptoslate.com\/sui-based-cetus-protocol-suspends-operations-following-260-million-oracle-exploit\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/cryptoslate.com\/sui-based-cetus-protocol-suspends-operations-following-260-million-oracle-exploit\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/cryptoslate.com\/"},{"@type":"ListItem","position":2,"name":"Sui-based Cetus Protocol suspends operations following $223 million oracle exploit"}]},{"@type":"WebSite","@id":"https:\/\/cryptoslate.com\/#website","url":"https:\/\/cryptoslate.com\/","name":"CryptoSlate","description":"Cryptocurrency News and Real-time Coin Data","publisher":{"@id":"https:\/\/cryptoslate.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/cryptoslate.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/cryptoslate.com\/#organization","name":"CryptoSlate","url":"https:\/\/cryptoslate.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptoslate.com\/#\/schema\/logo\/image\/","url":"https:\/\/cryptoslate.com\/wp-content\/uploads\/2018\/05\/c-logo.jpg","contentUrl":"https:\/\/cryptoslate.com\/wp-content\/uploads\/2018\/05\/c-logo.jpg","width":1000,"height":1000,"caption":"CryptoSlate"},"image":{"@id":"https:\/\/cryptoslate.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/twitter.com\/cryptoslate","https:\/\/www.instagram.com\/cryptoslate\/","https:\/\/www.linkedin.com\/company\/cryptoslate\/","https:\/\/www.youtube.com\/c\/cryptoslate","https:\/\/cryptoslate.substack.com\/","https:\/\/t.me\/cryptoslatenews"],"publishingPrinciples":"https:\/\/cryptoslate.com\/editorial-policy\/","ownershipFundingInfo":"https:\/\/cryptoslate.com\/about\/","actionableFeedbackPolicy":"https:\/\/cryptoslate.com\/about\/","correctionsPolicy":"https:\/\/cryptoslate.com\/about\/","ethicsPolicy":"https:\/\/cryptoslate.com\/disclaimers\/"},{"@type":"Person","@id":"https:\/\/cryptoslate.com\/#\/schema\/person\/b333928a322ba4c082e8bb2ad0f14eb6","name":"Oluwapelumi Adejumo","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/cryptoslate.com\/#\/schema\/person\/image\/","url":"https:\/\/cryptoslate.com\/wp-content\/uploads\/2025\/12\/profile-photo-oluwapelumi-adejumo-150x150.jpg","contentUrl":"https:\/\/cryptoslate.com\/wp-content\/uploads\/2025\/12\/profile-photo-oluwapelumi-adejumo-150x150.jpg","caption":"Oluwapelumi Adejumo"},"description":"Oluwapelumi values Bitcoin's potential. He imparts insights on a range of topics like DeFi, hacks, mining and culture, underlining transformative power.","jobTitle":"Reporter","worksFor":"CryptoSlate","url":"https:\/\/cryptoslate.com\/author\/oluwapelumi-adejumo\/"}]}},"_links":{"self":[{"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/posts\/481523"}],"collection":[{"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/users\/720"}],"replies":[{"embeddable":true,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/comments?post=481523"}],"version-history":[{"count":7,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/posts\/481523\/revisions"}],"predecessor-version":[{"id":481593,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/posts\/481523\/revisions\/481593"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/media\/481526"}],"wp:attachment":[{"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/media?parent=481523"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/categories?post=481523"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/tags?post=481523"},{"taxonomy":"post_folder","embeddable":true,"href":"https:\/\/cryptoslate.com\/wp-json\/wp\/v2\/post_folder?post=481523"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}