Pinned
Refunds for affected users have been processed. When you next connect to aftermath.finance, you'll be prompted to withdraw your balance in Aftermath Perps.
Aftermath Finance (🥚, 🥚)
2,178 posts
Aftermath Finance (🥚, 🥚)
@AftermathFi
On-chain finance you can verify. Swap, Trade, Stake, & MEV Infra. #TrustButVerify
- We've published a sheet of every affected account: docs.google.com/spreadsheets/d… If you're affected, review your row before claim opens Monday so we can minimize inconsistencies. Some balances may need reconciling because of withdrawals taken during the under-collateralized window.If you have collateral idle in your account you can already withdraw it.
- Aftermath Postmortem On April 29th, Aftermath experienced an isolated security incident in the integrator feature of AF Perps. All other products (afSui, Pools, Farms, Agg, SOR) are completely unaffected & all users will be made whole. This has been a scary week for crypto. AI
- Aftermath Finance (🥚, 🥚) reposted
Today Aftermath Finance sustained an exploit of its perpetuals protocol on Sui which was subsequently paused. The Sui Foundation, in partnership with Mysten Labs, has committed to working with Aftermath Finance to both ensure fund recovery to users and continuity of theUpdate: Great news. Thanks to support from @Mysten_Labs and @SuiFoundation all users will be made whole ZERO losses for anyone. Aftermath will be up and running again soon. Thank you to both teams and to @blockaid_ for the rapid response. For clarity: this was not a Move - We expect users to be made whole in the next 48-72hrs. We are working across the hours to get everyone their funds back. We appreciate everyone’s patience.
- Update: Great news. Thanks to support from @Mysten_Labs and @SuiFoundation all users will be made whole ZERO losses for anyone. Aftermath will be up and running again soon. Thank you to both teams and to @blockaid_ for the rapid response. For clarity: this was not a Move
- Update on today's incident: We're actively coordinating with zeroShadow, Seal, Blockaid, and OtterSec on response and fund-tracing. We're pursuing every available law-enforcement channel. A patch to the affected contracts is in development. More updates to follow.
- Total damage is 1.14m. We are now focused on recovery.
- All our other packages/products remain safe. The only vulnerability its our perps protocol which allowed negative builder code fees to be set.
- ONLY PERPS WAS EXPLOITED. The exploit stems from us allowing (wrongly) to set negative builder codes fees.
- Attention Aftermath community - We’ve identified an exploit affecting the protocol. Our team is actively investigating alongside leading security partners. As a precaution, the protocol has been paused and measures are being taken to minimize potential impact to user funds.
- We have been exploited.
