Loading Search...
Nemo hack drains $2.59M after ignored auditor warning. Team pauses protocol, patches flaw, and pledges user compensation.
Author: Akshat Thakur
September 11, 2025 — Yield trading protocol Nemo, built on the Sui blockchain, has admitted that an exploit draining $2.59 million could have been prevented if its team had acted on an auditor’s warning. The September 7 Nemo hack stemmed from unaudited code deployed without proper multisignature protections.
Nemo’s post-mortem revealed that the exploit targeted a function called get_sy_amount_in_for_exact_py_out. This piece of code, meant to manage slippage, was deployed onchain without a full audit. Asymptotic, the protocol’s smart contract auditor, had already identified the flaw in a preliminary review.
The Nemo team admitted it “did not adequately address this security concern in a timely manner.” A single developer was able to deploy the code with only one signature, bypassing recommended procedures such as multisignature approval and confirmation hash verification.
The vulnerability was introduced in January 2025, but Nemo only implemented an upgrade procedure in April, too late to stop the risky code from going live. Asymptotic again warned the team on August 11, but Nemo prioritized other issues and left the flaw unpatched until attackers exploited it in September.
This echoes other preventable crypto incidents, including SuperRare’s $730,000 loss in July due to an overlooked smart contract bug.
Following the Nemo hack, the project has paused all core functions and is working with security teams to freeze assets linked to the attacker on centralized exchanges.
A patch is now under audit by Asymptotic. Nemo has removed its flash loan function, fixed the vulnerable code, and added a manual reset mechanism for restoring values. A user compensation plan is in the works, including debt structuring at the level.
In its statement, Nemo said:
“Security and risk management demand constant vigilance. We are committed to stronger defences and stricter protocol controls going forward.”
The Nemo hack highlights ongoing issues in decentralized finance security:
Industry experts argue that greater emphasis on audited code, multisignature deployment, and ongoing monitoring could prevent many exploits.
The $2.59 million Nemo hack underscores the risks of deploying unaudited code and ignoring security warnings. While Nemo has promised stronger controls and a user compensation plan, the incident highlights the urgent need for rigorous security practices across DeFi.
Our Crypto Talk is committed to unbiased, transparent, and true reporting to the best of our knowledge. This news article aims to provide accurate information in a timely manner. However, we advise the readers to verify facts independently and consult a professional before making any decisions based on the content since our sources could be wrong too. Check our Terms and conditions for more info.
