Cetus posts $5M bounty for hacker’s ID amid centralization issues on Sui freeze

Cetus Protocol posted a $5 million reward on Might 23 for data that identifies and results in the arrest of the attacker who extracted $223 million from its decentralized alternate on the Sui community. 

Introduced on Might 23, the supply is coordinated with cybersecurity agency Inca Digital and will probably be funded by the Sui Basis if the tip proves decisive.

Informants should electronic mail the perpetrator’s identify, location, and supporting proof with the topic “Cetus lead.” The DEX added that it will withdraw any civil motion and cancel the bounty ought to the exploiter return the property and settle for the sooner settlement proposal.

Notably, the supply comes amid centralization issues relating to Sui following the freezing of $162 million by a lot of its 114 validators.

Whitehat supply units the stage

Hours earlier than the general public bounty, Cetus used an on-chain transaction to ship a separate proposal to the attacker on Sui and Ethereum (ETH) blockchains. 

That observe provided a $6 million retention charge, equal to 2,324 ETH, in alternate for the return of 20,920 ETH and all frozen quantities on Sui. 

The crew mentioned it had mapped the exploiter’s Ethereum wallets and was coordinating with US federal authorities, FinCEN, the Seychelles Police Pressure, chosen defense-sector companions, main exchanges, and bridge operators. 

The ultimatum warned that any try to launder funds would set off a worldwide law-enforcement escalation.

Per the protocol’s Might 22 incident disclosure on X, the attacker focused a flaw in Cetus’ pricing mechanism, prompting a direct pause of all smart-contract exercise. The undertaking’s blockchain information reveals that the exploit yielded $223 million in tokens. 

Of that sum, $61 million was moved to Ethereum through bridges, whereas the remaining $162 million was frozen by Sui community validators.

Cetus has not revealed when regular buying and selling will resume or whether or not the crew will implement code adjustments earlier than reactivating the contracts.

Validator motion sparks decentralization debate

In accordance with its block explorer, Sui hosts 114 energetic validators. On Might 22, Sui acknowledged {that a} broad plurality agreed to reject any transaction originating from the attacker’s wallets shortly after the breach.

The collective freeze prevented the remaining $162 million switch and locked the tokens on-chain. 

Gautham Santhosh, co-founder of Polynomialfi, wrote on X that the crypto group is now weighing the good thing about fast asset safety in opposition to the implication that validators can droop particular accounts at will.

Though he highlighted that the method demanded consensus and was not arbitrary, the episode has modified the safety assumptions relating to layer-1 blockchains.

Talked about on this article