XRP Futures Heat up as Nasdaq Welcomes XRPI and XRPT in Major ETF Debut
Sui’s Biggest Liquidity Provider, Cetus, Hit by $260M Hack; Sui-Based Tokens Plummet 90%
- News In 4 Seconds
Shaurya Malwa
- 0
- 18 minutes read
BTC
$111,102.75
+
3.93%
ETH
$2,659.32
+
4.74%
USDT
$0.9999
–
0.02%
XRP
$2.4303
+
3.36%
BNB
$685.04
+
4.70%
SOL
$178.48
+
6.45%
USDC
$0.9998
–
0.00%
DOGE
$0.2415
+
7.67%
ADA
$0.8027
+
6.23%
TRX
$0.2769
+
1.14%
SUI
$3.8408
+
8.61%
LINK
$16.69
+
5.20%
HYPE
$31.31
+
18.63%
AVAX
$25.23
+
8.40%
XLM
$0.3004
+
4.25%
SHIB
$0.0₄1529
+
5.75%
HBAR
$0.2031
+
3.88%
BCH
$430.52
+
5.27%
LEO
$8.8619
+
0.87%
TON
$3.1786
+
4.25%
Share this article
By Shaurya Malwa|Edited by Parikshit Mishra
Updated May 22, 2025, 2:17 p.m. Published May 22, 2025, 11:54 a.m.
- Cetus Protocol, the largest DEX on the Sui network, was exploited, leading to a halt in trading and drained liquidity pools.
- The attacker used spoof tokens to exploit price curves and reserve calculations, manipulating liquidity to extract real assets.
- Cetus has paused its smart contracts for safety and plans to release a detailed statement, while its token CETUS has dropped 40%.
Cetus Protocol, the largest decentralized exchange (DEX) and liquidity provider on the Sui network, has been drained of $260 million worth of tokens in an apparent hack, according to crypto sleuth Lookonchain.
The wallet tied to the Cetus Protocol exploit — 0xe28b50 — currently holds over 12.9 million SUI, valued at approximately $54 million at current prices.
STORY CONTINUES BELOW
Don’t miss another story.Subscribe to the Crypto Daybook Americas Newsletter today.See all newslettersBy signing up, you will receive emails about CoinDesk products and you agree to ourterms of useandprivacy policy.
On-chain data shows the address has a net worth exceeding 32.9 million SUI (approximately $137 million), suggesting the attacker may have already bridged or swapped funds through multiple paths.
The wallet remains active at the time of publishing and is likely in the process of obfuscating funds. This confirms the scale of the exploit and further pressures Sui’s DeFi infrastructure, as major token pools and pairs remain drained.
The Cetus team has paused the smart contracts and is actively investigating, it said in an X post. According to early analysis, the attacker used spoof tokens like BULLA to exploit broken price curves and reserve calculations.
They then added near-zero liquidity to manipulate internal LP state and repeatedly removed real assets like SUI and USDC without depositing anything meaningful.
Cetus confirmed the incident on X, saying the contract has been paused “for safety” and that a detailed statement will follow.
Binance founder CZ said the exchange’s team has reached out to Sui to offer help,.
CETUS is down 40% in the past few hours, while Sui-based memecoins like BULLA and MOJO have dropped over 90%.
UPDATE (May 22, 12:00 UTC): Updates headline and story with additional details.
UPDATE (May 22, 12:13 UTC): Adds further details and CZ tweet.
Shaurya is the Co-Leader of the CoinDesk tokens and data team in Asia with a focus on crypto derivatives, DeFi, market microstructure, and protocol analysis.
Shaurya holds over $1,000 in BTC, ETH, SOL, AVAX, SUSHI, CRV, NEAR, YFI, YFII, SHIB, DOGE, USDT, USDC, BNB, MANA, MLN, LINK, XMR, ALGO, VET, CAKE, AAVE, COMP, ROOK, TRX, SNX, RUNE, FTM, ZIL, KSM, ENJ, CKB, JOE, GHST, PERP, BTRFLY, OHM, BANANA, ROME, BURGER, SPIRIT, and ORCA.
He provides over $1,000 to liquidity pools on Compound, Curve, SushiSwap, PancakeSwap, BurgerSwap, Orca, AnySwap, SpiritSwap, Rook Protocol, Yearn Finance, Synthetix, Harvest, Redacted Cartel, OlympusDAO, Rome, Trader Joe, and SUN.
