Got Exploited? Here’s Your Sheet, Your Warning, and Your Monday Panic

Aftermath Finance spills the tea on the $1.1M Sui Perps exploit. Compensation claims open Monday, but good luck matching your balance-it’s like trying to find a matching sock in a dryer.

So, AftermathFi dropped a Google Sheet (yes, the same tool you use to track your wine budget) listing every wallet that got robbed in the April 29 heist. Turns out, $1.1 million vanished faster than my will to live on a Monday morning.

Claims don’t open until Monday, but they’re begging you to check your row now. Because, you know, nothing says “fun weekend” like reconciling your stolen crypto balances.

Your Row: Probably Wrong, Definitely Frustrating

AftermathFi tweeted (or X’d, whatever) that “some balances may need reconciling” because of withdrawals during the “under-collateralized window.” Translation: if your number looks like a typo, hit up their Discord or slide into their DMs with your transaction data. Good luck getting a reply before 2026.

The sheet is right here, but don’t expect your number to be as clean as your dating profile. Spoiler: it’s not.

On the bright side, if you’ve got idle collateral, you can withdraw it now. So, yay? You’re welcome.

$1.1M Gone in 40 Minutes: A Masterclass in Speed

The whole thing went down faster than a first date with a red flag. The attacker showed up on April 28 with 405 SUI, and by the next morning, they’d assembled 278 USDC in seed collateral. Then, 17 drain attempts between 08:55 and 09:31 UTC. Eleven succeeded. Six failed. It’s like a heist movie, but with worse stakes.

The culprit? A signed integer flaw in the integrator accounting logic. Basically, the attacker registered as their own integrator, set a negative 100,000 taker fee, and pulled out synthetic collateral as real USDC. Each successful transaction was a single PTB that opened two accounts, executed a market order, and withdrew. It’s almost impressive-if it wasn’t so depressing.

The vulnerability was introduced in August 2025 (time travel, anyone?) and audited in November by @osec_io. They missed it. Oops.

After the drain, the funds moved through single-use wallets like a hot potato: $250K to Binance, $400K to KuCoin, $150K in SUI to HTX, and $150K to HitBTC. All in 80 minutes. Sui’s security concerns? Yeah, they’re piling up faster than my unread emails.

AI, Audits, and the Great Crypto Comeback

AftermathFi isn’t relaunching AFperps anytime soon. They’re getting another audit (because one wasn’t enough) and admitting that manual reviews are “insufficient in 2026.” Groundbreaking.

They’re also investing in AI-security workflows, which sounds fancy but means they’re finally admitting humans are fallible. Shocking, I know.

Shoutout to Blockaid, ZeroShadow, OtterSec, the Sui Foundation, and Mysten Labs for their rapid response. The rest of the protocol? Untouched. Small wins, I guess.

So, Monday’s the big day for claims. But first, reconcile your row. Because nothing says “fun” like double-checking your financial ruin.

Read More

2026-05-02 19:18