Decentralized Redemption: Cetus Plans Full Reimbursement After $223M Exploit
Cetus Protocol pledges full compensation post-$223M hack, pending a Sui community vote to unlock $162M in frozen assets.
In a bold step toward decentralized accountability, Cetus Protocol has pledged to fully compensate users affected by a massive $223 million exploit, marking a critical moment for blockchain governance and community-driven crisis management.
The attack, which struck on May 22, targeted the Concentrated Liquidity Market Maker (CLMM) pools on Cetus, a decentralized exchange operating on the Sui blockchain. According to a technical postmortem, the breach stemmed from a vulnerability in overflow checks during liquidity operations. The flaw enabled an attacker to manipulate pool prices and inject artificial liquidity, draining the protocol through multiple transactions.
Within an hour of the exploit, Cetus halted vulnerable contracts and, in collaboration with Sui validators, successfully froze two wallets containing $162 million in stolen assets. Yet, approximately $60 million was bridged to Ethereum and converted into ETH, leaving the protocol scrambling for solutions.
The resolution plan hinges on an unprecedented on-chain vote by the Sui community to unlock the frozen funds. On May 27, Cetus confirmed via social media that it had mobilized enough treasury funds and secured a loan from the Sui Foundation to fully reimburse users—but only if the vote passes.
"Because full recovery is dependent upon the results of the community vote, we humbly ask for the Sui community’s full support," the team wrote. The vote represents a stress test for decentralized governance, where validators and token holders, rather than centralized entities, determine restitution outcomes.
Industry leaders have voiced support. Binance founder Changpeng Zhao called the approach exemplary, praising the Sui network's proactive stance. Nonetheless, Cetus acknowledged the exceptional nature of its appeal but insisted it was "the right decision" for affected users.
Should the vote fail, Cetus will initiate partial compensation independently, underscoring a commitment to user trust even without complete community backing.
Efforts to recover the lost funds continue. The attacker has not responded to white-hat overtures, prompting Cetus to issue a $5 million bounty for information leading to their identification. Law enforcement and cybersecurity firm Inca Digital are also involved in the investigation.
Meanwhile, the exploit has had widespread ripple effects across Sui-linked assets. Tokens like LBTC and AXOL crashed to near zero, while others such as LOFI and HIPPO lost over 80% of their value, according to DEX Screener.
The outcome of the upcoming community vote could set a precedent in decentralized finance. It underscores both the promise and the fragility of Web3 ecosystems, where collective decision-making replaces institutional control in navigating crises of this scale.
