Twice lucky? Cetus’ recovery plan on Sui mirrors a Solana blueprint

Cetus, a Sui-based decentralized exchange (DEX), suffered a $223 million exploit on May 22nd. The incident mirrors a similar situation faced by Crema Finance, a Solana-based project, three years prior. Both projects share the same development team, led by Henry Du, a fact confirmed by sources within Sui’s developer community.

Cetus, employing a strategy successfully used by Crema, offered a $6 million bounty to the hacker in exchange for the return of the remaining stolen funds. This mirrors Crema’s 2022 approach, where a similar deal was struck. However, unlike Crema’s relatively muted community response, the Cetus bounty has generated significant backlash. Many community members argue that even if funds are recovered, the damage to CETUS token holders and the project’s reputation is irreparable.

The Sui network’s response further fueled the controversy. Sui validators, coordinating to freeze approximately $162 million of the stolen funds, faced criticism for centralizing control and violating the network’s decentralized principles. While this action prevented further laundering, it sparked a debate on the true meaning of decentralization in blockchain networks. The network’s relatively small number of validators (114) compared to Ethereum (over 1 million) and Solana (1,157) exacerbated this concern.

Although Sui developers briefly considered an emergency whitelist function to bypass security checks for fund recovery, this proposal was ultimately rejected due to decentralization concerns. The incident highlights the ongoing security challenges in the DeFi space and the tension between the ideal of decentralization and the practical need for intervention during security breaches. The hacker, as of yet, has not responded to Cetus’s offer, and the frozen funds remain untouched. The contrasting responses to similar events, such as the Bybit hack, underscore the complex and evolving nature of the crypto community’s approach to security and decentralized governance.