Cetus Offers $6M Bounty to Hacker for Return of $56M in Stolen ETH

Crypto Journalist

Amin Ayan

Crypto Journalist

Amin Ayan

About Author

Amin Ayan is a crypto journalist with over four years of experience in the industry. He has contributed to leading publications such as Cryptonews, Investing.com, 99Bitcoins, and 24/7 Wall St. He has...

Author Profile

Share

Copied

Last updated: 

May 23, 2025

Why Trust Cryptonews

Cryptonews has covered the cryptocurrency industry topics since 2017, aiming to provide informative insights to our readers. Our journalists and analysts have extensive experience in market analysis and blockchain technologies. We strive to maintain high editorial standards, focusing on factual accuracy and balanced reporting across all areas - from cryptocurrencies and blockchain projects to industry events, products, and technological developments. Our ongoing presence in the industry reflects our commitment to delivering relevant information in the evolving world of digital assets. Read more about Cryptonews

Cetus Protocol, a decentralized exchange built on the Sui blockchain, is offering a $6 million bounty to the hacker behind a $223 million exploit that rocked the platform earlier this week.

The reward is part of a time-sensitive deal to recover a portion of the stolen assets — specifically, 20,920 ETH valued at around $56.3 million that was bridged to Ethereum.

Cetus Reaches Out to Hacker

In a late-night post on X, Cetus confirmed it had identified the Ethereum wallet used in the attack and had reached out to negotiate with the hacker.

“In exchange, you can keep 2,324 ETH (~$6M) as a bounty, and we will consider the matter closed,” the team said in a message co-signed by data analytics firm Inca Digital.

The message warned that legal and intelligence operations would begin if the attacker attempts to off-ramp or mix the assets.

The breach, which occurred Thursday, exploited a vulnerability in Cetus’ liquidity pool smart contracts.

The attacker drained millions in crypto, some of which were quickly swapped into USDC and converted to ETH. Cetus claims the vulnerability has now been patched.

Sui Network, the underlying blockchain for Cetus, responded by coordinating with validators to freeze addresses associated with the stolen funds.

“A large number of validators identified the addresses with the stolen funds and are ignoring transactions on those addresses until further notice,” the Sui Foundation said.

According to the Sui team, roughly $162 million worth of compromised tokens have been “paused” as a containment measure.

While Cetus applauded the collaborative effort with DeFi protocols and Sui stakeholders, the incident raised red flags in the crypto community over the level of control exercised by the network.

“Does that make SUI centralized? The short answer is YES,” wrote Cyber Capital founder Justin Bons, criticizing the validators’ ability to censor transactions.

He pointed to the network’s validator count and token supply concentration as key concerns.

In the aftermath, Cetus’ native token CETUS plunged 50% and currently trades at $0.1714, according to CoinGecko.

Other tokens tied to the protocol, including LOFI and HIPPO, suffered similar losses.

Crypto Lost $1.6 Billion to Hacks in Q1

In the first three months of 2025, the crypto ecosystem lost a whopping $1,635,933,800 across 39 incidents, according to the blockchain security platform Immunefi.

Most of that was the result of only two hacks of two centralized exchanges. Phemex suffered a $69.1 million loss in January, while Bybit lost $1.46 billion in February.

Subsequently, the total number of losses in the first quarter marks a 4.7x increase compared to Q1 2024. At that time, hackers and fraudsters stole $348,251,217.

Notably, experts assume that the infamous North Korean Lazarus Group is behind the two largest attacks. They stole $1.52 billion, or 94% of total losses.