DEV Community

Cover image for How One Missing Assert Drained $1.14M From Aftermath Finance — A Signed Integer Exploit on Sui
mehvetero
mehvetero

Posted on

How One Missing Assert Drained $1.14M From Aftermath Finance — A Signed Integer Exploit on Sui

A technical breakdown of the Aftermath Finance perpetuals exploit (April 29, 2026). How a negative fee value bypassed validation, inflated collateral, and allowed an attacker to drain $1.14M USDC in 36 minutes — and what a single line of code would have prevented.

https://mehvetero.com/

Top comments (0)