Cetus Protocol, a well-known liquidity platform on the Sui blockchain, has fallen victim to a massive security breach, with over $150 million in assets reportedly stolen, according to on-chain data shared by BlockBeats. This exploit marks one of the most serious DeFi breaches on the Sui network to date.

“Hackers have drained multiple liquidity pools, exposing vulnerabilities in the protocol’s smart contracts,” said a cybersecurity source familiar with the matter.


On-Chain Data Confirms Widespread Drainage

Blockchain forensics tools confirm abnormal activity across key liquidity pools on Cetus. Massive token outflows were traced to unauthorized wallet addresses, suggesting that sophisticated attackers exploited smart contract flaws or compromised private keys.

“The speed and precision of the attack suggest a coordinated effort,” noted a DeFi analytics firm.

Key trading pairs such as CETUS/SUI, USDC/SUI, and others were hit the hardest, resulting in major slippage and halted trades.


CETUS Token Plunges as Panic Sets In

The CETUS token crashed by more than 60% within hours, as panic spread among holders. Many users rushed to exit their positions, further accelerating the price drop and increasing volatility across the platform.

“Liquidity vanished in minutes, and slippage became unbearable,” commented a long-time Cetus user.

Market Impact

LOFI: Dropped over 70%

CETUS Token: The native token of Cetus Protocol experienced a sharp decline, dropping over 40% in value shortly after the exploit.

Sui Ecosystem Tokens: Other tokens within the Sui ecosystem also suffered significant losses:

HIPPO: Down over 17%

WET: Plummeted over 75%


Cetus Team Responds: Emergency Measures Underway

The Cetus Protocol team has acknowledged the breach, confirming that emergency steps are being taken, including:

  • Pausing all smart contract interactions
  • Working with the Sui Foundation and external auditors
  • Advising users to revoke approvals immediately

“We are actively investigating the exploit and working to contain the damage,” said the team in an official statement on X (formerly Twitter).


DeFi Security in Question Once Again

This attack has raised new concerns about DeFi security practices, especially on emerging networks like Sui. Despite the chain’s advanced architecture, Cetus’ breach proves that protocol-level security is paramount.

“This is a wake-up call for the entire ecosystem to enforce stricter smart contract auditing and monitoring,” stated a blockchain security analyst.


Trust in Sui DeFi Ecosystem Shaken

The $150 million Cetus Protocol hack is a major blow to DeFi confidence on the Sui network. Until security mechanisms improve across the board, users and developers may hesitate to engage with emerging DeFi platforms — no matter how innovative they appear.

logo

blockto.io

info@blockto.io

Blockto.io Copyright © 2025, All rights reserved

News
Rates
Buy
More
We use cookies to personalize content and ads, provide social media features, and analyze our traffic. In accordance with GDPR/AVG and EU cookie regulations, data is processed only with your consent. We may share information about your use of our website with our social media, advertising, and analytics partners, and you can manage or withdraw your consent at any time. View more
Cookies settings
Accept
Privacy & Cookie policy
Privacy & Cookies policy
Cookie name Active

Privacy Policy

At BitxJournal.com, we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, process, store, and protect personal information in accordance with the General Data Protection Regulation (GDPR) and AVG (EU privacy legislation).

1. Data Controller

BitxJournal.com acts as the data controller for all personal data processed through this website.

2. Personal Data We Collect

We may collect and process the following categories of data:

Personal Data

  • Name and email address (when you subscribe to newsletters or contact us)

Technical & Usage Data

  • IP address, browser type, operating system

  • Device information

  • Pages visited, referral sources, and interaction data

This data is collected via cookies, log files, and analytics technologies.

3. Legal Basis for Processing

We process personal data only when a lawful basis exists, including:

  • Consent – when you explicitly agree (e.g., cookies, newsletter sign-up)

  • Legitimate interest – to operate, secure, and improve our website

  • Legal obligation – when required by applicable laws

You may withdraw your consent at any time.

4. Purpose of Data Processing

Your data is processed for the following purposes:

  • Operating and maintaining the website

  • Improving content, usability, and performance

  • Sending newsletters or updates (only with consent)

  • Analyzing traffic and user behavior

  • Responding to inquiries or support requests

5. Cookies & Consent Management

We use cookies and similar technologies in compliance with EU Cookie Law.

  • Non-essential cookies are placed only after explicit user consent

  • Users may accept, reject, or manage cookie preferences at any time

  • Consent can be withdrawn without affecting prior lawful processing

Detailed cookie information is available in our Cookie Settings panel.

6. Third-Party Data Processing

We may share limited data with trusted third-party service providers, including:

  • Analytics providers (e.g., Google Analytics)

  • Advertising partners (for personalized or non-personalized ads)

These third parties act as data processors and process data only under contractual obligations compliant with GDPR/AVG.

7. International Data Transfers

Where data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or equivalent legal mechanisms.

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law.

9. Data Security

We implement appropriate technical and organizational security measures to protect personal data against unauthorized access, alteration, disclosure, or destruction.

10. Your GDPR Rights

Under GDPR/AVG, you have the right to:

  • Access your personal data

  • Rectify inaccurate or incomplete data

  • Request data erasure (“right to be forgotten”)

  • Restrict or object to processing

  • Data portability

  • Withdraw consent at any time

  • Lodge a complaint with a supervisory authority

11. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy at any time. Any changes will be posted on this page with a revised effective date.

12. Contact Information

For privacy-related inquiries or GDPR requests, contact:

📧 Email: support@blockto.io
🌐 Website: https://blockto.io

Save settings
Cookies settings