On-chain analysis reveals ~$390k in stale Sui Bridge withdrawals sent to an address linked to the Cetus exploit, raising concerns about inadequate exploit-address screening in fund recovery.
Security & Exploits ·
Approximately $390,000 in stale Sui Bridge withdrawals were routed to an address publicly linked to the Cetus exploit across multiple transactions, according to on-chain analysis. The transfers occurred through what was presented as a fund recovery operation, raising questions about whether the process included screening mechanisms to prevent funds from reaching addresses associated with known exploits.
The mechanics involved stale withdrawals from the Sui Bridge being consolidated and sent onward to the address in question across several transactions. The concern centers on whether adequate due diligence was performed to cross-reference recipient addresses against databases of exploit-associated wallets before executing the transfers.
What remains unclear is whether the routing to the exploit-linked address was intentional, a result of incomplete screening protocols, or driven by other factors in the recovery workflow. No public statement from relevant parties explaining the fund flows or confirming whether additional safeguards have been implemented has been documented in the available material.