Tools Crypto Exploit Tracker exploit-0090
Exploit record
Typus Finance Oracle Manipulation
- Loss
- $3M
- Attack vector
- Oracle Manipulation
- Chain
- Sui
- Sector
- Borrowing
What happened
On October 15, 2025, Typus Finance on Sui lost about $3.44M after a broken auth gate in the oracle module let the attacker publish bogus prices.
A public price feed without real authentication is less an oracle than a suggestion box. Once the attacker could publish values the protocol treated as trusted, draining the TLP became straightforward. Typus paused quickly, but the bug was the kind that should never have made it to production.
Sources
- Typus post-mortemx.com/TypusFinance/status/1978688164278702152
One record from the Crypto Exploit Tracker, maintained by the Security Desk. Data: CSV · JSON ·RSS · CC BY 4.0 with attribution to YFarmX.Tracker updated · 15 September 2026