Skip to main content
Sign in
Typus Perp1 decision on this page

Audit log

Every state-changing event for Typus Perp: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions carry three independent witnesses — the original source, an Internet Archive snapshot taken at submission time, and a Solana memo signed by our publicly-disclosed publisher key.

  1. #1publishby system:backfill
    2026-05-26 19:54:30Z
    Score: ?? (no score change)
    anchoranchored
    chain
    mainnet-betaslot 422,351,499
    sig
    58FDgBChDiMk…1sEPS3g8explorer ↗
    hash
    5QiPWMvca42G…4hCRjoDhsha256 → base58
    verifying row…full verify ↗
    canonical bytes (5839 B) ▸
    {"actor":"system:backfill","investigation_id":"c904afdd-65c3-4db7-98bb-c96d6f81e74b","kind":"publish","page_slug":"typus-perp","published_at":"2026-05-26T19:54:30.598Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Typus Perp","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://defimon.xyz/blog/typus-finance-hack-october-2025","type":"other","url":""},{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-typus-finance-hack-october-2025","type":"other","url":""},{"credibility":3,"name":"https://slowmist.medium.com/is-the-move-language-secure-the-typus-permission-validation-vulnerability-755a5175f7c3","type":"other","url":""},{"credibility":3,"name":"https://unchainedcrypto.com/sui-based-typus-finance-loses-3-4-million-in-hack/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-typus-finance-hack-october-2025","type":"other","url":""},{"credibility":3,"name":"https://slowmist.medium.com/is-the-move-language-secure-the-typus-permission-validation-vulnerability-755a5175f7c3","type":"other","url":""},{"credibility":3,"name":"https://www.coinspeaker.com/typus-finances-unaudited-contract-loses-3m-3rd-major-sui-exploit-in-2025/","type":"other","url":""},{"credibility":3,"name":"https://finance.yahoo.com/news/typus-finance-unaudited-contract-loses-175622463.html","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://medium.com/@TypusFinance/typus-finance-tlp-oracle-exploit-post-mortem-report-response-plan-ce2d0800808b","type":"other","url":""},{"credibility":3,"name":"https://getfailsafe.com/typus-finance-smart-contract-exploit","type":"other","url":""},{"credibility":3,"name":"https://www.panewslab.com/en/articles/7b951b0a-2ccb-4397-9d33-27594669ffdb","type":"other","url":""},{"credibility":3,"name":"https://defillama.com/protocol/typus-perp","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.bitget.com/news/detail/12560605016676","type":"other","url":""},{"credibility":3,"name":"https://crypto.news/sui-based-typus-finance-plummets-35-after-oracle-exploit/","type":"other","url":""},{"credibility":3,"name":"https://defillama.com/protocol/typus-perp","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.coinspeaker.com/typus-finances-unaudited-contract-loses-3m-3rd-major-sui-exploit-in-2025/","type":"other","url":""},{"credibility":3,"name":"https://slowmist.medium.com/is-the-move-language-secure-the-typus-permission-validation-vulnerability-755a5175f7c3","type":"other","url":""},{"credibility":3,"name":"https://finance.yahoo.com/news/typus-finance-unaudited-contract-loses-175622463.html","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://tracxn.com/d/companies/typusfinance/__mix5JBo-wW80iKTHgL1LgtIIZ2iOtFPfBxBkThKSsHM","type":"other","url":""},{"credibility":3,"name":"https://defillama.com/protocol/typus-perp","type":"other","url":""},{"credibility":3,"name":"https://www.panewslab.com/en/articles/txxg1638","type":"other","url":""}]}],"sources_used":[],"summary":"Typus Perp is a GMX-style perpetuals DEX operating on the Sui blockchain, developed by Typus Finance (founded by Tommy Chen). On October 15, 2025, the protocol suffered a $3.44 million oracle manipulation exploit that drained its TLP liquidity pool entirely — caused by an unaudited smart contract module that was excluded from the project's May 2025 MoveBit security audit. As of May 2026, the protocol has minimal TVL ($126K) and the stolen funds have not been recovered.","timeline":[{"date":"2022-01-01","event":"Typus Finance founded by Tommy Chen on Sui blockchain.","source":""},{"date":"2024-11-13","event":"Vulnerable custom oracle contract package deployed to production powering the TLP pool.","source":""},{"date":"2025-05-01","event":"MoveBit security audit of Typus Finance completed. The vulnerable TLP oracle contract was excluded from audit scope.","source":""},{"date":"2025-05-01","event":"Cetus Protocol (primary Sui DEX) hacked for over $220 million — first major Sui exploit of 2025.","source":""},{"date":"2025-09-01","event":"Nemo Protocol exploited for $2.6 million via unaudited developer-deployed code — second major Sui exploit of 2025.","source":""},{"date":"2025-10-15","event":"Oracle manipulation attack begins at 13:05 UTC. Attacker exploits missing assert check in update_v2 function to manipulate prices and drain $3.44 million from the TLP pool across ten transactions.","source":""},{"date":"2025-10-15","event":"Team alerted at 13:24 UTC; all smart contracts paused at 13:39 UTC; root cause identified at 13:42 UTC; Sui Foundation notified at 13:48 UTC; law enforcement report filed at 14:54 UTC.","source":""},{"date":"2025-10-15","event":"TYPUS token falls approximately 35% from $0.009 to $0.0055 following exploit disclosure.","source":""},{"date":"2025-10-15","event":"Stolen assets bridged to Ethereum via Circle CCTP and converted to DAI on Curve.","source":""},{"date":"2025-10-16","event":"Typus Finance publishes post-mortem on Medium detailing attack timeline, vulnerability, and preliminary response plan. White hat bounty of 15% offered on-chain.","source":""},{"date":"2026-01-01","event":"Typus Finance initiates TLP Recovery Plan, requiring large LPs to submit contact information. No confirmed compensation disbursement reported.","source":""},{"date":"2026-05-01","event":"Typus Perp TVL stands at approximately $126,420 on DeFiLlama — down roughly 97% from pre-exploit levels.","source":""}]},"v":1}
    Verify offline (run on your own machine)
    python -m src.verify_decision 6bb794f2-b9f3-4b5e-a919-d3c0d9d1c7f6
How verification works. The “Row integrity” check above is computed in your browser — your machine recomputes the SHA-256 of the canonical bytes and compares against the stored hash. No avoid.net server can fake that check. The “full verify” link goes one level deeper: your browser fetches the on-chain transaction from a Solana RPC node and confirms the same hash is in the memo. If you don’t want to trust either avoid.net or the public RPC, run the CLI verifier on your own machine — python -m src.verify_decision <event_id>.