Verify a decision

{"actor":"system:backfill","investigation_id":"c904afdd-65c3-4db7-98bb-c96d6f81e74b","kind":"publish","page_slug":"typus-perp","published_at":"2026-05-26T19:54:30.598Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Typus Perp","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://defimon.xyz/blog/typus-finance-hack-october-2025","type":"other","url":""},{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-typus-finance-hack-october-2025","type":"other","url":""},{"credibility":3,"name":"https://slowmist.medium.com/is-the-move-language-secure-the-typus-permission-validation-vulnerability-755a5175f7c3","type":"other","url":""},{"credibility":3,"name":"https://unchainedcrypto.com/sui-based-typus-finance-loses-3-4-million-in-hack/","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.halborn.com/blog/post/explained-the-typus-finance-hack-october-2025","type":"other","url":""},{"credibility":3,"name":"https://slowmist.medium.com/is-the-move-language-secure-the-typus-permission-validation-vulnerability-755a5175f7c3","type":"other","url":""},{"credibility":3,"name":"https://www.coinspeaker.com/typus-finances-unaudited-contract-loses-3m-3rd-major-sui-exploit-in-2025/","type":"other","url":""},{"credibility":3,"name":"https://finance.yahoo.com/news/typus-finance-unaudited-contract-loses-175622463.html","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://medium.com/@TypusFinance/typus-finance-tlp-oracle-exploit-post-mortem-report-response-plan-ce2d0800808b","type":"other","url":""},{"credibility":3,"name":"https://getfailsafe.com/typus-finance-smart-contract-exploit","type":"other","url":""},{"credibility":3,"name":"https://www.panewslab.com/en/articles/7b951b0a-2ccb-4397-9d33-27594669ffdb","type":"other","url":""},{"credibility":3,"name":"https://defillama.com/protocol/typus-perp","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.bitget.com/news/detail/12560605016676","type":"other","url":""},{"credibility":3,"name":"https://crypto.news/sui-based-typus-finance-plummets-35-after-oracle-exploit/","type":"other","url":""},{"credibility":3,"name":"https://defillama.com/protocol/typus-perp","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://www.coinspeaker.com/typus-finances-unaudited-contract-loses-3m-3rd-major-sui-exploit-in-2025/","type":"other","url":""},{"credibility":3,"name":"https://slowmist.medium.com/is-the-move-language-secure-the-typus-permission-validation-vulnerability-755a5175f7c3","type":"other","url":""},{"credibility":3,"name":"https://finance.yahoo.com/news/typus-finance-unaudited-contract-loses-175622463.html","type":"other","url":""}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"https://tracxn.com/d/companies/typusfinance/__mix5JBo-wW80iKTHgL1LgtIIZ2iOtFPfBxBkThKSsHM","type":"other","url":""},{"credibility":3,"name":"https://defillama.com/protocol/typus-perp","type":"other","url":""},{"credibility":3,"name":"https://www.panewslab.com/en/articles/txxg1638","type":"other","url":""}]}],"sources_used":[],"summary":"Typus Perp is a GMX-style perpetuals DEX operating on the Sui blockchain, developed by Typus Finance (founded by Tommy Chen). On October 15, 2025, the protocol suffered a $3.44 million oracle manipulation exploit that drained its TLP liquidity pool entirely — caused by an unaudited smart contract module that was excluded from the project's May 2025 MoveBit security audit. As of May 2026, the protocol has minimal TVL ($126K) and the stolen funds have not been recovered.","timeline":[{"date":"2022-01-01","event":"Typus Finance founded by Tommy Chen on Sui blockchain.","source":""},{"date":"2024-11-13","event":"Vulnerable custom oracle contract package deployed to production powering the TLP pool.","source":""},{"date":"2025-05-01","event":"MoveBit security audit of Typus Finance completed. The vulnerable TLP oracle contract was excluded from audit scope.","source":""},{"date":"2025-05-01","event":"Cetus Protocol (primary Sui DEX) hacked for over $220 million — first major Sui exploit of 2025.","source":""},{"date":"2025-09-01","event":"Nemo Protocol exploited for $2.6 million via unaudited developer-deployed code — second major Sui exploit of 2025.","source":""},{"date":"2025-10-15","event":"Oracle manipulation attack begins at 13:05 UTC. Attacker exploits missing assert check in update_v2 function to manipulate prices and drain $3.44 million from the TLP pool across ten transactions.","source":""},{"date":"2025-10-15","event":"Team alerted at 13:24 UTC; all smart contracts paused at 13:39 UTC; root cause identified at 13:42 UTC; Sui Foundation notified at 13:48 UTC; law enforcement report filed at 14:54 UTC.","source":""},{"date":"2025-10-15","event":"TYPUS token falls approximately 35% from $0.009 to $0.0055 following exploit disclosure.","source":""},{"date":"2025-10-15","event":"Stolen assets bridged to Ethereum via Circle CCTP and converted to DAI on Curve.","source":""},{"date":"2025-10-16","event":"Typus Finance publishes post-mortem on Medium detailing attack timeline, vulnerability, and preliminary response plan. White hat bounty of 15% offered on-chain.","source":""},{"date":"2026-01-01","event":"Typus Finance initiates TLP Recovery Plan, requiring large LPs to submit contact information. No confirmed compensation disbursement reported.","source":""},{"date":"2026-05-01","event":"Typus Perp TVL stands at approximately $126,420 on DeFiLlama — down roughly 97% from pre-exploit levels.","source":""}]},"v":1}