Glossary
Cetus Hack (2025)
The May 2025 exploit of Cetus Protocol — Sui's largest DEX — draining ~$220M via an integer overflow in liquidity-position accounting.
On May 22, 2025, attackers exploited an integer-overflow vulnerability in Cetus Protocol's concentrated-liquidity AMM on Sui. The bug allowed creating a position with effectively no collateral, then borrowing real liquidity against it. Total losses reached approximately $220 million.
The Sui Foundation and validators voted to freeze the attacker's on-chain addresses immediately — a controversial intervention made possible by Sui's validator-set-managed account freezing. Cetus subsequently recovered most of the funds through a combination of frozen-asset return and the Sui Foundation's treasury support.