According to ChainCatcher, on May 22, Cetus experienced a smart contract attack on its CLMM liquidity pool. The attacker exploited vulnerabilities in open-source libraries to depress the pool price and extract assets. Cetus has taken measures to mitigate the impact.
With the support of most Sui validator nodes, Cetus has urgently frozen two Sui wallet addresses of the attacker. Remaining funds have been exchanged and cross-chain transferred to the Ethereum mainnet.
Cetus is collaborating with the Sui security team and auditing institutions to review contracts and ensure secure recovery services. Cetus will enhance monitoring, initiate additional audits, and release security reports, while formulating recovery plans to compensate affected LPs.
