Concerns about a potential vulnerability arose among the community after multiple liquidity pools on the Sui blockchain were unexpectedly depleted on July 11. These pools were predominantly affiliated with BlueMove, a decentralized exchange operating within the Sui ecosystem.
Did BlueMove Drain the Liquidity Pools?
Reports indicate that BlueMove may have withdrawn the locked total value across all liquidity pools on its platform, leading to an alarming loss exceeding 700,000 SUI. Tyler Simpson, leader of Quantum Void Labs, highlighted this disturbing trend on social channels under his alias, @quantumvoidlabs. He elaborated that tokens launched through BlueMove’s MovePump Launchpad were particularly targeted, with meme coins and smaller projects significantly impacted as their liquidity plunged to zero dollars.
How Does Onchain Evidence Support These Claims?
Defimon Alerts, a blockchain surveillance entity, discovered an onchain message which stated a BlueMove pool was drained of around $400,000. The message hinted at a potential “white hat” agreement, whereby the accountable party could retain 30% as a reward for highlighting the flaw, on condition that 70% was reverted within 48 hours to a specific Sui address. Failure to comply would trigger legal proceedings and recovery actions, as noted by the sender.
Community members echoed these findings. For instance, X user @saksidasaksi remarked on BlueMove’s active reduction of liquidity pools and available liquidity drop for projects like Beeg Blue Whale relying on the MovePump contract. They suggested that BlueMove had ceased its developments some time ago and was withdrawing liquidity under the false notion that tokens were safeguarded.
Is There a History of Backdoor Installations?
Simpson identified a possible backdoor within BlueMove, originating from a package update executed on May 31 by the party controlling the upgrade authority in Sui’s smart contract framework. This update enabled a function for reclaiming added liquidity and a double-minting function inflating LP tokens, later locked in as permanent changes. Defimon Alerts corroborated these findings, underscoring varying loss estimates between $400,000 and $550,000, supplementary to the 700,000 SUI noted by Simpson.
In August 2023, the project previously ceased its operations on the Sei Network, triggered by insufficient trading volumes and instructed users to delist NFTs within 72 hours. Nevertheless, BlueMove has yet to issue an official response to the allegations.
- The incident resulted in over 700,000 SUI in losses, affecting meme coins and smaller projects.
- A backdoor vulnerability was reportedly embedded during a BlueMove package update.
- Community members have expressed frustration and concern over BlueMove’s recent actions.
- No formal statement has been received from BlueMove regarding liability or corrective measures.
The unfolding situation remains intense, with no definitive resolution from BlueMove on the allegations or the financial ramifications experienced by the affected projects. The crypto community watches closely as further developments are anticipated.
