Security expert Alex Horlan stated that the Cetus protocol attacker used near-zero liquidity injections to distort internal pool logic and steal assets.

Quotes that support claims

Alex Horlan, CTO of web3 security firm HackenProof, explained that the attacker likely used a near-zero liquidity injection to manipulate the pools’ internal state. This allowed them to extract valuable SUI and USDC tokens without contributing real assets.

They then added near-zero liquidity to manipulate internal LP state and repeatedly removed real assets like SUI and USDC without depositing anything meaningful.

Related projects

Related topics