The root cause of the Cetus incident was a bug in a Cetus math library, not a vulnerability in Sui or Move.