Community Trust ScoreLikely Real
Full Sail is done. The decentralized finance protocol built on the Sui blockchain announced it’s winding down after an attacker pulled roughly $91,000 from its vaults — a breach traced back to vulnerabilities inside oracle provider Switchboard.
The team broke the news on X on Tuesday. No soft landing, no pivot. Just a clean shutdown announcement paired with immediate damage control: new deposits disabled, liquidity provider reward claims halted, and all existing pools flipped to withdrawal-only mode while the team runs final security checks. Their stated priority is compensating affected users, and they’ve committed to covering any financial shortfalls out of the protocol’s own remaining liquidity to make sure community depositors get paid first.
The attack wasn’t isolated to Full Sail.
Switchboard’s Oracle Infrastructure at the Center
Switchboard, the oracle provider whose infrastructure sits underneath Full Sail’s price feeds, was identified as the entry point. The breach was traced to potential compromises within Switchboard’s Move-based implementations — the smart contract language used across several blockchains including Sui, Aptos, and IOTA. Once the scale of the problem became clear, Switchboard paused its own operations across those platforms, including Aptos, Sui, IOTA, and Movement, while it investigates exactly what went wrong.
Oracles are basically the connective tissue of DeFi. They pull real-world price data into on-chain protocols, and when that data feed gets compromised, everything downstream is at risk. It’s a well-known attack surface, and it’s been exploited repeatedly across the broader DeFi space over the past few years. Full Sail isn’t the first protocol to get caught in this kind of failure, and it probably won’t be the last.
Three Full Sail vaults were hit. Total extracted: about $91,000. Not catastrophic by DeFi standards, but enough to end the protocol entirely.
Virtue’s $455,000 Loss and VUSD Instability
The same Switchboard breach rippled out to Virtue, a stablecoin lending protocol operating on the IOTA blockchain. Virtue reported losses of $455,000 — a significantly larger hit — and the incident also knocked the backing of its VUSD stablecoin off balance. A stablecoin losing its peg, even temporarily, can erode user confidence fast. Virtue’s situation is still developing, and the full picture of how badly VUSD’s stability was affected isn’t entirely clear yet.
Put together, the two protocols lost over $546,000 between them. That’s a meaningful number for ecosystems that are still building liquidity and user trust.
Full Sail’s plan for user repayment is straightforward on paper: use whatever protocol-owned liquidity remains, cover any gap out of pocket, and get instructions out to users for withdrawals and claims as quickly as possible. The team said those instructions are coming soon. No specific timeline was given, which is probably frustrating for anyone sitting on locked funds right now.
What This Means for Sui’s DeFi Ecosystem
Full Sail was a real piece of Sui’s DeFi infrastructure. Losing it matters. Sui has been positioning itself as a fast, developer-friendly chain, and incidents like this — especially ones tied to third-party oracle failures rather than core protocol bugs — tend to raise hard questions about ecosystem maturity. Developers building on any chain have to trust the providers they integrate with, and when one of those providers has a breach this wide, it touches everything connected to it.
Switchboard’s acknowledgment of the breach is at least a start. The oracle provider said it’s actively investigating the vulnerabilities in its Move-based code and has paused operations to contain the damage. But the community is still waiting on specifics — what exactly failed, how the attacker got in, and what changes will prevent a repeat.
It’s worth noting that Switchboard’s pause across Aptos, Sui, IOTA, and Movement is a pretty significant operational decision. That’s not a minor patch. Pausing live oracle feeds across multiple chains means any protocol relying on Switchboard for price data is essentially frozen until the investigation wraps up. The downstream effects of that are still unfolding.
For Full Sail’s users, the immediate question is practical: when do they get their money back, and how much? The team has been clear that depositors come first and that they’ll cover shortfalls. But “instructions coming soon” isn’t a date, and the gap between now and actual repayment is where anxiety tends to build.
Switchboard’s investigation is ongoing. Full Sail’s withdrawal instructions are pending.
Hub: Aptos price, news, and analysis
Frequently Asked Questions
How much money was stolen from Full Sail?
An attacker extracted approximately $91,000 from three Full Sail vaults in a breach linked to vulnerabilities in oracle provider Switchboard.
Did the Switchboard breach affect other protocols beyond Full Sail?
Yes — Virtue, a stablecoin lending protocol on the IOTA blockchain, reported losses of $455,000 from the same breach, which also affected the stability of its VUSD stablecoin.
Why It Matters
The shutdown of Full Sail highlights the ongoing vulnerabilities within decentralized finance protocols, particularly those reliant on oracle services, which have been a recurring target for exploitation. This incident not only raises concerns about the security architecture of projects on the Sui blockchain but also serves as a cautionary tale for investors and developers in the broader DeFi ecosystem regarding the risks associated with third-party dependencies. The immediate response to halt operations underscores the urgency for protocols to implement robust security measures to maintain user trust and safeguard assets.
