BlockBeats News, May 24th, SlowMist officially released an analysis of the Cetus exploit incident, stating that the core of this event was the attacker exploiting a carefully crafted parameter to trigger an overflow that bypassed detection, ultimately being able to exchange a huge amount of liquidity assets with a minimal token amount.
SlowMist stated that the attacker utilized precise parameter selection and exploited a vulnerability in the `checked_shlw` function to obtain liquidity worth billions of dollars at the cost of only 1 token. This was an extremely precise mathematical attack, and the SlowMist security team advised developers to rigorously validate all mathematical function boundary conditions in smart contract development.
Earlier on May 22nd, according to community reports, the liquidity provider Cetus in the SUI ecosystem was suspected to have been attacked, resulting in a significant decrease in liquidity pool depth. Multiple token pairs on Cetus experienced a downturn, with the estimated loss exceeding $230 million. Subsequently, Cetus released a statement acknowledging an incident detected within the protocol, and as a precautionary measure, the smart contract has been temporarily paused while the team conducts an investigation into the event.
Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.