Nemo Protocol $2.6 Million Exploit from Unaudited Code

Nemo Protocol identified a $2.6 million exploit, primarily involving unaudited code deployment by an external developer. The incident has significantly affected its DeFi yield platform operations on the Sui blockchain, causing financial and user confidence challenges.

The protocol team stated they are investigating and have suspended all smart contract operations. Assets in the vault remain untouched, offering a measure of stability despite the exploit’s impacts.

The exploit led to a severe drop in the protocol’s Total Value Locked (TVL), reducing more than $6 million to about $1.53 million. This decrease highlights major liquidity outflows and heightened user withdrawals.

Financial repercussions are evident as approximately $2.4 million in USDC was transferred from the protocol. The move involved cross-chain bridging from Arbitrum to Ethereum, pointing to a sophisticated attack method.

Certain parallels are drawn with the Cetus Protocol case within the Sui blockchain. Past incidents have raised concerns about DeFi governance and the centralization risks that seem prevalent within this ecosystem.

Expert opinions suggest that unaudited deployments remain a systemic risk across DeFi projects. Calls for stronger governance and security measures are becoming more vocal, with analysts pointing to potential regulatory interventions in future scenarios.

We are investigating the matter and have suspended all smart contract activity for the time being — Nemo Protocol Team, Official Team, Nemo Protocol Source