What happened
Full Sail, a DEX on Sui, lost about $91,000 from three of its automated vaults on 29 August 2026. The cause was a compromise of Switchboard, the oracle provider that priced those vaults, not Full Sail's own admin keys. Full Sail paused deposits and withdrawals that morning. Switchboard halted its network on Sui, Aptos, IOTA and Movement while it investigated. The same incident hit Virtue, which reported about $455,000 in losses.
A few days later Full Sail said it would shut down. It disabled new deposits and LP reward claims and pledged all remaining protocol-owned liquidity to affected users. The team said it would cover any shortfall so community depositors are repaid first. As of 1 September, Full Sail said Switchboard had not provided the technical details it asked for or committed to compensation.
How it happened
- The attacker compromised Switchboard production code that controls which keys may sign oracle price updates, and used it to add a signing key they controlled to a live oracle.
- Once that key was accepted, the attacker's signed updates pushed the prices feeding Full Sail's vaults to roughly 100 times below market.
- At the depressed prices the attacker deposited into the affected vaults and received an oversized share.
- After prices were restored, the attacker withdrew that share for more than they had deposited, taking about $91,000 across three vaults.
Protocol details
Evidence
- analysis DeFiLlama defillama.com
- analysis Full Sail (@FullSailFi): investigating a security incident affecting Full Sail vaults (via fxtwitter mirror) api.fxtwitter.com
- analysis Full Sail Shuts Down After $91K Sui Hack Drains Three Vaults - Yellow yellow.com
- analysis Full Sail to shut down after Switchboard oracle incident causes user losses - FinanceFeeds financefeeds.com
- analysis One Oracle Key Compromise Froze Four Chains and Hit Full Sail - Coinpaprika coinpaprika.com
Understand the attack patterns
Build your security review skills
Work through hands-on labs covering real exploit mechanics, review techniques, and defensive patterns.
