Aftermath Finance (🥚, 🥚) @AftermathFi

On-chain finance you can verify. Swap, Trade, Stake, & MEV Infra. #TrustButVerify aftermath.finance Sui Joined September 2022

Tweets

2K
Followers

53K
Following

98
Likes

4K

Aftermath Finance (🥚, 🥚) @AftermathFi

a month ago

@natalia777mar All the positions should be considered closed at the time of the exploit. You don’t need to hedge. If you performed any action during the exploit time window, we will take that into consideration and make sure that you receive what you are owed.

1 0 1 206 0

View Details

Aftermath Finance (🥚, 🥚) @AftermathFi

a month ago

We've published a sheet of every affected account: docs.google.com/spreadsheets/d… If you're affected, review your row before claim opens Monday so we can minimize inconsistencies. Some balances may need reconciling because of withdrawals taken during the under-collateralized window. If your amount looks incorrect, open a ticket on our Discord or DM us on X with your transaction.

11 12 72 10K 10

View Details

Aftermath Finance (🥚, 🥚) @AftermathFi

a month ago

If you have collateral idle in your account you can already withdraw it.

1 0 3 2K 1

View Details

Aftermath Finance (🥚, 🥚) @AftermathFi

a month ago

@EseTeLopez @0x_Abdul x.com/aftermathfi/st…

Aftermath Finance (🥚, 🥚) @AftermathFi

a month ago

Update: Great news. Thanks to support from @Mysten_Labs and @SuiFoundation all users will be made whole ZERO losses for anyone. Aftermath will be up and running again soon. Thank you to both teams and to @blockaid_ for the rapid response. For clarity: this was not a Move

116 68 484 139K 28

0 0 2 49 0

View Details

Aftermath Finance (🥚, 🥚) @AftermathFi

a month ago

Aftermath Postmortem On April 29th, Aftermath experienced an isolated security incident in the integrator feature of AF Perps. All other products (afSui, Pools, Farms, Agg, SOR) are completely unaffected & all users will be made whole. This has been a scary week for crypto. AI tooling is developing rapidly, and we were among the almost a dozen protocols affected by hacks. We’re hopeful that by sharing our experience, we can help the broader crypto community learn and build back stronger. Root Cause The root cause was a signed integer issue in the integrator accounting logic. A malicious user was able to create their own integrator with a negative taker fee. This negative fee is then credited to a newly created account, which can be freely withdrawn from the vault. This issue was introduced as part of a diff on August 29, 2025. The changes were audited by @osec_io in Nov 2025, but the issue was unfortunately missed. Timeline The attacker (suivision.xyz/account/0x1a65…) was first funded on 04-28 22:02:07 UTC with 405.24 SUI. At 04-29 08:21:48 UTC, the attacker swapped 300 SUI for ~278 USDC via the SOR to obtain seed collateral for opening perp positions. From 04-29 08:55:50 UTC to 09:31:49 UTC, the attacker drained ~1,139,927 USDC from AFperps across 17 attempts (11 successful, 6 failed). Each of the 11 successful transactions was a single PTB that opened two accounts, registered the attacker as their own integrator with a negative 100,000 taker fee, executed a market order that crossed against a real counterparty’s maker order, then withdrew the resulting synthetic collateral as real USDC. From 04-29 09:22:23 UTC to 10:45:22 UTC, the attacker laundered the proceeds through fresh single-use wallets and DEX swaps before depositing to Binance (suivision.xyz/account/0x9350…) (~$250K USDC), KuCoin (suivision.xyz/account/0x13c0…) (~$400K USDC), Huobi (suivision.xyz/account/0xe5c0…) (HTX) (~150K SUI), and HitBTC (suivision.xyz/account/0x8612…) (~$150K USDC). Next Steps Out of an abundance of caution, we’re conducting an additional audit before relaunching AFperps with a separate company. That being said, we also recognize that manual review alone is insufficient in 2026. We are investing heavily to improve our AI-security workflows. AI tooling is developing rapidly, and we were among the almost a dozen protocols affected by hacks this week. We’re thankful to all of our partners for their rapid response and help. In particular, Blockaid, ZeroShadow, OtterSec, Sui Foundation, and Mysten Labs.

15 19 134 10K 26

View Details

a month ago

We have been exploited.

airtx (🥚,🥚) 🇦🇲 @0xairtx

a month ago

. @AftermathFi has been exploited. I am so sorry to say. We're in a war room with @blockaid_

43 4 117 44K 11

43 4 73 37K 13

View Details

Aftermath Finance (🥚, 🥚) @AftermathFi

a month ago

Roughly 1 in every 8 transactions on @SuiNetwork is are Aftermath perps txs. Aftermath also accounts for almost 12% of all gas used on the network. With over 20 markets live, there’s never been a better time to trade on Aftermath. aftermath.finance/perpetuals