SlowMist Breaks Down How a Tiny Code Flaw Led to Cetus’ $230M Collapse

A critical vulnerability in Cetus Protocol’s smart contract code triggered a $230 million liquidity drain on May 22, according to blockchain security firm SlowMist. The exploit targeted an overflow detection flaw in the checked_shlw function within sui Network’s decentralized exchange infrastructure.

SlowMist’s forensic analysis reveals the get_delta_a function failed to properly validate arithmetic operations, allowing attackers to manipulate liquidity pools. The incident underscores persistent security challenges in DeFi protocols despite advanced auditing practices.

Market observers note the exploit occurred despite Cetus’ reputation as a leading Sui-based DEX, raising questions about protocol maturity in emerging LAYER 1 ecosystems. The technical breakdown highlights how microscopic coding errors can cascade into systemic failures in decentralized finance architectures.