internAF (Perpetual arc)

We've published a sheet of every affected account: #gid=1181738102" target="_blank" rel="nofollow noopener">docs.google.com/spreadsheets/d… If you're affected, review your row before claim opens Monday so we can minimize inconsistencies. Some balances may need reconciling because of withdrawals taken during the under-collateralized window. If your amount looks incorrect, open a ticket on our Discord or DM us on X with your transaction.

Aftermath Postmortem On April 29th, Aftermath experienced an isolated security incident in the integrator feature of AF Perps. All other products (afSui, Pools, Farms, Agg, SOR) are completely unaffected & all users will be made whole. This has been a scary week for crypto. AI tooling is developing rapidly, and we were among the almost a dozen protocols affected by hacks. We’re hopeful that by sharing our experience, we can help the broader crypto community learn and build back stronger. Root Cause The root cause was a signed integer issue in the integrator accounting logic. A malicious user was able to create their own integrator with a negative taker fee. This negative fee is then credited to a newly created account, which can be freely withdrawn from the vault. This issue was introduced as part of a diff on August 29, 2025. The changes were audited by @osec_io in Nov 2025, but the issue was unfortunately missed. Timeline The attacker (suivision.xyz/account/0x1a65…) was first funded on 04-28 22:02:07 UTC with 405.24 SUI. At 04-29 08:21:48 UTC, the attacker swapped 300 SUI for ~278 USDC via the SOR to obtain seed collateral for opening perp positions. From 04-29 08:55:50 UTC to 09:31:49 UTC, the attacker drained ~1,139,927 USDC from AFperps across 17 attempts (11 successful, 6 failed). Each of the 11 successful transactions was a single PTB that opened two accounts, registered the attacker as their own integrator with a negative 100,000 taker fee, executed a market order that crossed against a real counterparty’s maker order, then withdrew the resulting synthetic collateral as real USDC. From 04-29 09:22:23 UTC to 10:45:22 UTC, the attacker laundered the proceeds through fresh single-use wallets and DEX swaps before depositing to Binance (suivision.xyz/account/0x9350…) (~$250K USDC), KuCoin (suivision.xyz/account/0x13c0…) (~$400K USDC), Huobi (suivision.xyz/account/0xe5c0…) (HTX) (~150K SUI), and HitBTC (suivision.xyz/account/0x8612…) (~$150K USDC). Next Steps Out of an abundance of caution, we’re conducting an additional audit before relaunching AFperps with a separate company. That being said, we also recognize that manual review alone is insufficient in 2026. We are investing heavily to improve our AI-security workflows. AI tooling is developing rapidly, and we were among the almost a dozen protocols affected by hacks this week. We’re thankful to all of our partners for their rapid response and help. In particular, Blockaid, ZeroShadow, OtterSec, Sui Foundation, and Mysten Labs.

Roughly 1 in every 8 transactions on @SuiNetwork is are Aftermath perps txs. Aftermath also accounts for almost 12% of all gas used on the network. With over 20 markets live, there’s never been a better time to trade on Aftermath. aftermath.finance/perpetuals

Epoch 5 rewards are live. Rewards + Points for afLP, Makers, and Takers have all been distributed, on top of AF farms incentives being replenished. Every reward goes directly to the users trading and providing liquidity on Aftermath. Check your incentives and points: aftermath.finance/rewards

Sui isn't at 100MIST yet and we can already see the benefit of lower gas on the network. I don't want to get ahead of myself, but maybe 25MIST is the target.

Plug this into any LLM: Claude Code, Cursor, Codex and trade @AftermathFi perps in plain English. "What's BTC funding?" "Limit buy 0.01 BTC at $50 under mid." "Close all positions." + paper trading included! github.com/clawd-aftermat…

New Epoch starts Monday. Negative maker fees on every market. Liquid $SUI rewards to makers, takers, and afLP depositors. No back room mm deals. Everything flows to our users! Interested in integrating? MCP server: mcp.aftermath.finance/mcp Skills: skill.aftermath.finance CCXT: docs.ccxt.com/#/exchanges/af… Full API: aftermath.finance/docs/ Now fully available on @tread_fi.

Aftermath (@AftermathFi) is now live on tread.fi! Read the docs to learn how to connect your Aftermath account docs.tread.fi/account-creati…

You can now long or short $MRVL perps with up to 5x leverage. af.lol/perpetuals/USD…

JUST IN: @SUINETWORK USERS CAN NOW TRADE $GOOGL PERPS VIA @AFTERMATHFI

You can now long or short $GOOGL perps with up to 5x leverage. aftermath.finance/perpetuals/USD…

We are excited to announce that @AftermathFi, the perp exchange and @SuiNetwork validator, are proposing an 80% cut to Sui's RGP. We ask all @SuiNetwork validators to reduce their RGP to ≤ 100 MIST. We believe that this is both the right step and the right moment to align Sui with the rest of the market. Here's why: Sui today charges ~6x more than Solana for a simple transfer, despite having the competitive edge when it comes to faster finality, parallel execution, and greater flexibility through PTBs. A single order on Phoenix (Solana) costs $0.0011. On Aftermath, $0.0018. Both products have been heavily optimized for their respective stack. The remaining cost imbalance is due to how either chain charges for computation. Shouldn't we be incentivizing on-chain activity? After less than two months, Aftermath already consumes ~10% of Sui's daily gas. ~216k txs/day, ~2.1M on-chain events/day, 15 live markets across crypto, equities, and commodities. All fully on-chain. All paying gas on every quote, cancel, and fill. Lowering gas doesn't just save money for existing users; it unlocks entirely new participants - market makers, institutions, agents traders - who were previously priced out of high-frequency trading on Sui. Let's make Sui the home for onchain financial trading.

Aftermath has no exposure to @vercel and our front end remains safe for use.

Metastable is fully protected from the reETH OFT exploit. Protocol disabled deposits a while ago out of caution. Apologies for the delay in posting. Stay safe out there.

Now Live: @AftermathFi on @LorisTools • Real-time & Historical funding rates from Aftermath and 37+ other venues • Open Interest and Volume tracking to spot positioning & flows as they happen • Full historical funding charts: backtest any Aftermath symbol's funding against every other exchange Check it out → loris.tools

You can now long or short $BNB perps with up to 5x leverage. aftermath.finance/perpetuals/USD…

Epoch 4 rewards are live. Rewards + Points for afLP, Makers, and Takers have all been distributed, on top of AF farms incentives being replenished. Every reward goes directly to the users trading and providing liquidity on Aftermath. Check your incentives and points: aftermath.finance/rewards

Just dropped a live on-chain dashboard for @AftermathFi perps on $Sui 👉dune.com/sigma00/afperps Trader leaderboard, daily volume, protocol stats — all pulled directly from Sui on-chain. Trade with ref code `sigma` → fee discount + SUI rebates 👉 aftermath.finance/trade