According to Cetus's timeline of events, its core CLMM pools were disabled to prevent further loss within 30 minutes of the exploit commencing.