The exploit on Cetus Protocol in May 2025 was caused by a bug in Cetus’s custom math library, not by a vulnerability in the Sui blockchain or its Move programming language.

Quotes that support claims

Although the exploit was caused by a bug in Cetus’s custom math library—not a flaw in the Sui blockchain or Move language—Sui acknowledged the impact on users reflects on the broader network.

The root cause of the Cetus incident was a bug in a Cetus math library, not a vulnerability in Sui or Move.