Odaily News Web3 security company CertiK released a report indicating that in the first half of 2025, Web3 security incidents resulted in losses of nearly $2.5 billion, with a net loss of $2.29 billion, exceeding the total for last year. Phishing attacks have become the biggest threat, with losses of about $400 million in the second quarter, accounting for half of the total losses for the quarter (about $800 million), far exceeding the same period last year. Although incidents of Private Key leakage have decreased and code vulnerability attacks remain at historical averages, vigilance is still needed for significant cases like the Cetus Protocol.

According to Gate News bot, the Sui-based DEX Cetus team, which was previously hacked, recently said that the team is moving towards full open source and has launched a new "white hat bounty program" to "encourage collective technical and security contributions". As part of the protocol reboot, the team has fixed the software vulnerabilities that led to the hack, restored the pool data to the correct pricing, and conducted a security audit of all code fixes and contract upgrades. The affected liquidity pool has been replenished with $7 million in cash reserves, a $30 million USDC loan from the Sui Foundation, and some of the assets recovered from the attackers. However, not all compromised pools have fully recovered, with the current recovery rate ranging from 85% to 99%, depending on the extent of the pool's losses during the attack.

Golden Finance reports that Cetus Protocol, a Sui-native decentralized exchange that suffered a large-scale attack of $220 million in May, is advancing its open source plan after recently restarting. On May 22, an attacker exploited a pricing mechanism vulnerability to withdraw tokens from Cetus's main liquidity pool. The protocol successfully froze $162 million of the stolen funds shortly after the attack occurred. Before the attack occurred, Cetus's trading volume had been on the rise, exceeding $5 billion in April and also reaching $5 billion in May, despite pausing operations after May 22. In a Medium post on June 7, the Cetus team stated a day before the relaunch that they were working towards full Open Source development and were launching a new white paper bounty program to "encourage collective contributions in technology and security." As a restart

Sui ecological lending protocol Scallop's sCoin has been integrated into Cetus and Bucket, further enhancing the integrated income. At the same time, the lock-up amount of $SCA has exceeded 15 million, and 200,000 $SCA will be airdropped to veSCA holders in the near future.

SUI ecosystem lending protocol Scallop has a total SCA stake of 15 million, and has launched a 200,000 SCA Airdrop event. sCoin is an interest-bearing Token that can be obtained by adding Liquidity, and has been integrated into Cetus and Bucket. The Snapshot will be taken at 8 a.m. (GMT+8) on November 12th.

Odaily Planet Daily News: Cetus announced the launch of LP Burn function on X platform, which allows Liquidity Providers (LPs) to permanently lock their Liquidity, which cannot be withdrawn, and can only receive fees and mining rewards. This feature is driven by strong demand from the community and is suitable for various community projects and meme Tokens, especially for asset issuers to flexibly adjust their Token economic models. Currently, LPs can only lock the full range of Liquidity positions. Cetus also provides SDK for projects or dApps.

Gold Finance reported that Cetus released the LP burnout function, using Cetus

Golden Finance reported that Slow Mist founder Yu Xian posted on the X platform, stating that after the Cetus theft incident was covered by the Sui Foundation, users can currently retrieve most of their funds. Slow Mist also received a $20,000 tip from Hoi (@JaceHoiX), and the hacker tracking is still ongoing.

According to Gate News bot, as reported by Wu Shuo, the Cetus team has released the latest developments on the hacker incident. Currently, some of the stolen funds remain frozen on the Sui chain, while the rest of the funds have been transferred off-chain. The team has adopted a dual approach to recovery: on one hand, negotiating with white hat hackers, and on the other hand, initiating legal proceedings. Meanwhile, the team proposed unlocking the frozen assets through PoS voting within the Sui community. Regarding service recovery, the aggregator function has been reopened, and the CLMM liquidity pools that were not affected by the attack will gradually resume operations after the data repair is completed. The development team is working on system data repairs while formulating compensation and fund recovery plans, and they promise to make every effort to compensate users for their losses.

Odaily Star News reported that Scallop announced on X that sCoin has now been integrated into Cetus Aggregator. Users can directly exchange between sCoin and its underlying Token through Cetus, with support from Scallop's sCoin minting and destruction services. Please note: Since sCoin represents the user's borrowing position in the Scallop supply pool, replacing sCoin with its underlying Token will withdraw the user's position in Scallop.

Odaily Planet Daily News Official governance page shows that the dYdX community has voted to add support for CETUS on dYdX.

Gate News bot message, Sui ecological Liquidity platform Cetus announced that the Cetus Liquidity Aggregator has been relaunched, and the Cetus CLMM routing is temporarily closed and will be opened later. The full relaunch of Cetus is coming soon.

PANews May 28 news, Sui chain DEX protocol Cetus announced on official Twitter that this week's xCETUS rewards have been distributed as scheduled, as the relevant rewards were registered before the event occurred. However, due to the pause and recovery of CLMM liquidity pool operations, xCETUS staking rewards will be temporarily suspended for one week.

Gate News bot message, the Sui Foundation stated that it is providing a secured loan to Cetus as part of its plan to quickly fully compensate users for their losses. The Cetus team will use the proceeds from this loan and assets in its treasury to cover the losses caused by stolen funds (which have been bridged out of the Sui network). This loan will enable Cetus to cover losses beyond its own capacity.

Cetus securely transfers funds attacked by hackers through a multisignature trust Wallet, promising to return them to users. The Sui community approves the proposal to release the seized funds, helping the DEX resume operations.

Cetus announced that it has safely transferred the funds from the $220 million Hacker attack to a multisignature trust Wallet to ensure a return to users. The Sui community approved the proposal to release $162 million for compensating users and restoring the full operation of the DEX. Cetus stated that contract upgrades and preparations for a restart are underway.

The Sui community released $162 million through on-chain proposals to address the impact caused by the Cetus vulnerability and ensure the DEX returns to full operation. The frozen funds will be held in custody and gradually returned to users. Cetus plans to complete the full recovery, including data, contract upgrades, and product features, within a week.

Slow Mist analyzed the Cetus theft incident, pointing out that the attacker exploited a parameter overflow vulnerability to obtain a large amount of assets. The attacker used the checkedshlw function vulnerability to acquire various assets, with some funds being cross-chain to EVM addresses. Cetus has fixed the vulnerability, and $162 million has been frozen. Developers are advised to verify the boundary conditions of mathematical functions.

Gate News bot message, based on the analysis report released by the Slow Mist team, the Cetus protocol has been attacked, and the attacker exploited a vulnerability in the overflow detection of the checked_shlw function to carry out the attack. The attacker first borrowed haSUI through a flash loan, and then exploited a system vulnerability to exchange a large amount of liquidity with only 1 token. This attack resulted in an estimated loss of about $230 million, involving various digital assets such as SUI, vSUI, and USDC. The attacker transferred part of the funds to the EVM address through the Sui Bridge cross-chain and deposited $10 million in assets to Suilend. Currently, the SUI Foundation has frozen $162 million in stolen funds. Cetus has completed a bug fix, and the SlowMist team recommends that developers rigorously verify math function boundary conditions. Source: Wu Says

The analysis of the $230 million theft incident of Cetus released by Slow Mist shows that the attackers exploited an overflow detection bypass vulnerability, selecting parameters through precise calculations to exchange a minimal amount of tokens for a large amount of Liquidity assets. The attack demonstrated the power of mathematical overflow vulnerabilities, and it is recommended that developers strictly verify the boundary conditions of mathematical functions in smart contract development.

Sui officially announced on the X platform its support for the Cetus community voting proposal, which includes upgrading the protocol to return frozen funds and ensure asset security for users. However, Sui set two conditions when deciding to support the proposal: to remain neutral and forgo voting rights, while also requiring Cetus to commit to recovering assets to ensure full compensation for users.

Gate News bot message, according to the source Wu said, Sui official released a notice in response to the community voting proposal initiated by Cetus on the same day. The proposal aims to return frozen funds through a protocol upgrade without the need to rollback on-chain records or revoke transactions. The Sui team agrees to support this on-chain voting proposal and puts forward two specific requirements: first, the Sui official will maintain a neutral stance on the voting results, waive the voting rights, and is responsible for designing and executing a decision-making process that reflects the collective will of the Sui community. Relevant plans and code will be announced soon; second, Cetus must publicly commit to investing all financial resources to recover assets, ensuring that all users receive full compensation.

The Sui official has decided to support the Cetus community proposal to return frozen funds, but with additional conditions: remain neutral, give up voting rights, design and execute decision-making processes; Cetus must commit to recovering assets and fully compensating users. Since it involves the asset security of Cetus users, the Sui team has made careful considerations.

Gate News bot message, on-chain detective ZachXBT expressed his views on the $5 million bounty plan proposed by Cetus. He pointed out that the structure, which only pays a reward upon successfully locating the hacker, has issues. "No competent company would accept such a fee structure." ZachXBT suggested a hybrid model that combines hourly billing with success commissions to better incentivize professional teams to participate in the investigation. He also mentioned that objective factors such as the difficulty of law enforcement and the hacker's location constrain the possibility of fund recovery. Source of information: Wu Says

The article notes that on-chain detective ZachXBT has criticized the practice of offering a $5 million bounty only if it successfully helps find the hacker, arguing that this fee structure is unfair and does not incentivize people to participate. He argues that a fair compensation structure should be adopted, with both time-based and outcome-based commissions, to better motivate participants. In addition, he mentioned the possible unfairness of the bounty system, such as the poor legal environment in the location of the attacker, and the inability of law enforcement to recover all the funds after arrest.

Odaily News Slow Mist stated in a post on the X platform that the Cetus Hacker has not returned the funds, holding more than 60 million USD worth of ETH without further transfers. They have currently received suspicious clues related to the Cetus Hacker submitted by community users, and more details may be disclosed later.

Gate News bot message, the Sui community has voted to approve the proposal to support the recovery plan for the recent Cetus hacker attack incident. The Sui Foundation stated that over 90% of the voting validators support the recovery plan, leading to the vote being concluded early in just four days. The proposal approved updates to the protocol, allowing the frozen funds controlled by the hacker to be transferred to a Multi-signature Wallet. Trusted parties such as Cetus, the Sui Foundation, and OtterSec will be responsible for managing this wallet, with the aim of safeguarding the protected assets for delivery to the affected users according to the recovery plan.

According to Gate News bot reports, Cetus has announced a $5 million bounty program to find key information that can confirm the Hacker's identification and assist in the arrest, including name, Address, and related evidence. This operation is supported by the Sui Foundation and is in collaboration with Inca Digital. Cetus also stated that it has not yet received a response from the Hacker regarding its white hat negotiation proposal. If the Hacker chooses to cooperate and agrees to return the funds, the team will cancel accountability actions, including the bounty. The final bounty payment matters will be adjudicated by the Sui Foundation.

ChainCatcher news, Cetus announced that it has fixed the vulnerabilities from the earlier attack incident, and has collaborated with longer to track funds, label hacker Wallets, and communicate with law enforcement agencies. It has proposed a "white hat reconciliation plan" to the hacker: return assets within a specified time to receive a bounty of 2324 ETH (approximately 6 million dollars), with no accountability. The community's primary goal remains to recover the assets.

The Cetus team has confirmed the hacker's Ethereum wallet address and proposed a high bounty scheme, contingent on the return of the stolen funds to avoid legal action. The team has taken several measures to prevent fund loss, including contract locking, fund tracking, vulnerability fixes, and negotiation assistance. They are committed to continuing the recovery of funds and will release a full incident report.

The Cetus team has confirmed the Ethereum Wallet Address controlled by hackers in the latest progress on handling the attack incident and proposed a white-hat reconciliation plan. They have identified and fixed the source of the vulnerability, and are tracking funds and collaborating. The team will offer the hacker a bounty reward of 2,324 ETH, and if the remaining assets are returned within the deadline, they will not pursue legal liability. The community is currently focused on recovering the damaged assets, and a complete report will be released later.

BlockBeats News, on October 4th, according to official sources, the dYdX community initiated a proposal vote on whether to add CETUS to the dYdX Chain. The vote will take place at 21:35 on October 7, 2024, Coordinated Universal Time.

Cetus has released an update on the hacker attack incident on the X platform, having blocked two Sui wallet addresses of the attacker and frozen the majority of the stolen funds. The remaining funds have been exchanged and stored in two Ethereum wallets. The CLMM pool and services will be gradually restored after comprehensive verification, reviewing the upgraded contracts, and implementing cross-party audits and real-time monitoring to improve risk management measures, control asset liquidity rate, and increase the testing coverage of smart contracts.

Odaily Planet Daily News Slow Mist Cosine posted on the X platform that Sui's official intervention froze the $160 million in assets that had not yet escaped across the chain, and the remaining more than $60 million was distributed in two addresses, almost all of which were exchanged for ETH, a total of 23,243.

Adeniyi.sui said $160 million of the $220 million stolen from Cetus has been frozen and will soon be returned to the Cetus pool. （Cointelegraph）

Odaily Planet Daily News Slow Mist Cosine posted on the X platform that about $200 million was stolen from Cetus on Sui's network, and it is not easy for hackers to convert them into more stable assets and then cross over, and some traces of hackers have been obtained.

Odaily News According to OnChain Lens monitoring, as of now, the Cetus Hacker has exchanged 61.47 million USDC and 1770.5 SOL for 23244 ETH, with a bid price of 2658 USD.

Golden Finance reported that Sui issued a statement regarding the Cetus security incident, stating that it will actively support the Cetus team in their ongoing investigation and will provide further updates as soon as possible.

Odaily News According to monitoring by Lookonchain, the funds stolen from Cetus have exceeded $260 million, with approximately 60 million USDC being cross-chain transferred to Ethereum to exchange for ETH.

Odaily News Sui Network's largest DEX Cetus was hacked, losing approximately $200 million in assets. The hacker address primarily did two things in the past half hour: Withdrawing token liquidity will cross-chain a large amount of USDC from Sui to the Ethereum mainnet (since most of the stablecoins used in the token group pool are USDC, which accounts for the majority) Have all the stolen tokens on Cetus been sold off? - For the time being, there is no short-term plunge in the current token, mainly due to the withdrawal of the pool + emotional panic

Odaily News According to OnChain Lens monitoring, the DEX and SUI liquidity provider Cetus Protocol previously disclosed that it was attacked by hackers, with the attackers controlling all the mining pools priced in SUI, and the stolen funds have exceeded 200 million USD. They have now begun to exchange the stolen funds for USDC.

According to BlockBeats news on May 22, on-chain data shows that the Sui on-chain liquidity protocol Cetus Protocol was hacked, with assets stolen exceeding 150 million dollars.

PANews May 22 news, according to BWEnews reports, CETUS hacker Address data shows that the estimated loss is currently over $150 million.

According to Cointelegraph, CETUS, a decentralized exchange in the SUI ecosystem, was hacked. The attackers withdrew $11 million worth of SUI tokens from the SUI/USDC liquidity pool, causing the price of most tokens to drop by more than 75% and the liquidity pool to near depletion. The Sui Explorer data record shows that the address 0xe28b... e8ff06 removed 13,839,925.67 CETUS tokens from the liquidity pool at 18:31 GMT and directly exchanged them for 671,908.62 SUI tokens, equivalent to about $2.62 million. The details of the incident are still under investigation.

Odaily Planet Daily News According to the official governance page, the dYdX community has initiated a vote to add support for CETUS on-chain on dYdX, with the voting deadline set for October 13th.