Bridge protocol accidentally withdrew ~$392K in USDT to Cetus exploit attacker wallet; funds remain frozen pending token issuer intervention.
Security & Exploits ·
A bridge protocol operator acknowledged sending approximately $392,000 in USDT to a wallet associated with a Cetus exploit attacker. The operator stated that an automated withdrawal process completed the transfers without recognizing the recipient address as connected to the earlier exploit. Three transactions totaling the amount were identified, with 109,000 USDT remaining in the attacker's wallet.
The funds have not been moved since the transfers occurred. The bridge protocol operator requested that the token issuer and Cetus freeze the assets while they remain accessible. The operator indicated they have since implemented screening procedures to check recipients against known exploit and sanctioned addresses before processing future claims, and invited submission of additional addresses for their blocklist.
It remains unclear whether Tether or Cetus has responded to the freeze request, or what steps may be underway to recover or immobilize the funds. The operator's acknowledgment of the error was prompted by community flagging, and the effectiveness of their newly implemented recipient screening has not yet been demonstrated.