Cetus releases report on theft incident, will promote LP compensation plan and strengthen security audit

Odaily Planet Daily News Cetus officially released a report on the theft incident, saying that on May 22, Cetus suffered an advanced smart contract attack on the CLMM liquidity pool. Cetus has taken countermeasures to mitigate the impact as soon as possible. The attacker took advantage of an undiscovered vulnerability in the open source library, lowered the pool price, built a position in the high price zone, and took advantage of the overflow check defect to inject inflated liquidity with very few tokens, and then repeatedly performed liquidity removal operations to extract assets from the pool, repeatedly used unverified calculation functions to attack, and finally successfully stole funds. In order to jointly maintain the best interests of the entire ecosystem, with the support of most Sui verification nodes, Cetus urgently froze the attacker's two Sui wallet addresses, which contained the main part of the stolen funds. The remaining stolen funds have been exchanged by hackers and transferred across chains to the Ethereum mainnet. Cetus is working with the Sui security team and several auditing agencies to review the contract and conduct multi-party joint audits to ensure the safe restoration of CLMM services after verification is completed. At the same time, Cetus will strengthen on-chain monitoring, initiate additional audits, and publish security reports regularly. To compensate the affected LPs, Cetus is developing a recovery plan with ecosystem partners and calling on Sui validators to support on-chain voting to speed up the return of user assets and rebuild confidence. While the legal process continues, Cetus also provides the attacker with an opportunity to return as a white hat. Cetus is about to issue a final ultimatum to them. If there are any updates, Cetus will continue to transparently inform the community.