BlueMove drains $550K from Sui pools as users allege backdoor

Liquidity pools on the Sui-based DEX BlueMove were drained July 11, with onchain observers accusing the team of planting a backdoor.

"BlueMove team shipped the backdoor themselves," Tyler Simpson, founder of Quantum Void Labs, said. Simpson pointed to a May 31 package upgrade that added a liquidity-return function and a double-mint LP token inflation mechanic, after which the package was made immutable.

The drain affected tokens launched through the MovePump bonding-curve launchpad, with estimates ranging from $400,000 to more than 700,000 SUI, or roughly $550,000. Defimon Alerts flagged an onchain message offering a 30% white-hat bounty for the return of funds within 48 hours, warning that legal action would follow otherwise. Simpson said more than 90% of liquidity was removed and pools were taken to zero.

The incident marks the second time BlueMove has abruptly wound down operations — it shuttered its Sei Network deployment in August 2023 after citing low trading volume. Simpson said he had warned the Sui ecosystem about BlueMove on three prior occasions, and two days before the drain criticized Mysten Labs and the Sui Foundation for pushing away most projects built on the chain. BlueMove had not issued a public response as of publication.

The drain undermines trust in Sui-based DeFi infrastructure, particularly for projects that relied on BlueMove's liquidity pools as locked. If confirmed as an insider exploit, the incident could accelerate capital flight from the Sui ecosystem and intensify scrutiny of bonding-curve launchpads like MovePump that depend on third-party DEX liquidity.

This article is for informational purposes only and does not constitute investment advice.