← All investigations · Mischief Finance hub
MISCHIEF FINANCE
INVESTIGATION · REPORT BY RICHIE
On-chain forensic report · 18 July 2026

SUITRUMP & the BlueMove Exploit:
What Happened — and Why We Come Back Stronger

Every figure below is verified directly from Sui mainnet. Wallets are linked to the explorer so you can check them yourself.
SUITRUMP family — I want to speak to you plainly. We were caught in someone else's exploit of the BlueMove DEX, and it cost us. I am not going to sugar-coat the damage, and I am not going to hide a single wallet or number from you. But hear me clearly: SUITRUMP itself was never hacked, our core is intact, and we will fully recover and come back stronger than we have ever been. Here is exactly what happened.

1 Two attacks in one week

The damage came from two separate incidents, both rooted in a bug inside BlueMove — not in SUITRUMP.

Incident 1 The drain — 11 July

An attacker exploited a liquidity-provider accounting bug in BlueMove's old AMM and drained roughly 394 pools in a single night (11 July, 20:46–23:43 UTC). SUITRUMP's liquidity was originally bonded on BlueMove's MovePump launchpad, so the SUI backing our BlueMove pool was stolen. The attacker walked away with ~714,000 SUI (~$525K), moved it to a fresh cash-out wallet, converted it to wrapped BTC + USDC, and left. Both wallets have been dormant since that night.

Incident 2 The faucet — 17 July, and this is the one that moved our price

When the drain emptied the SUI side of our BlueMove pool to almost zero, BlueMove never froze the pool. In an automated market maker with no SUI left on one side, a tiny SUI input pulls out almost the entire token reserve — the broken pool became a "buy hundreds of millions of SUITRUMP for pennies" faucet.

On 17 July at 18:39 UTC, a second wallet — an arbitrage bot, not the original attacker — did exactly that: it paid 0.109 SUI and pulled out 864,000,000 SUITRUMP from the dead pool, then dumped it straight into our real pools on Cetus and SuiDex. That near-free supply — not real holders selling — is what pushed our price down ~20%. The same wallet ran the same play across 15+ other BlueMove coins the same evening.

The trigger transaction (864M SUITRUMP for 0.109 SUI)
DQVW2R9B3teEt9BVuBJbkYqUCsiCeM67suwfDGtMGwuT

2 The damage — exactly

3 What is safe — and this is the part that matters

Intact The heart of SUITRUMP was never touched

  • The SUITRUMP token and contract are untouched — the exploit was entirely inside BlueMove's AMM.
  • We hold ~$40K+ of real, intact liquidity across multiple venues — none of it dependent on BlueMove, and much of it in live, incentivised farms earning VICTORY rewards:
SuiDex V2 · SUI / SUITRUMP — with 6× farm & VICTORY rewards
~$15.6K  ·  add LP · stake · zap-in all live
SuiDex V2 · USDC / SUITRUMP — farmed
~$8.7K
SuiDex V3 (CLMM) · SUI / SUITRUMP — 0xdf8ccfcc10…d4b284
~$13.4K  (price trackers don't even show this pool)
Cetus · SUITRUMP pools
~$3K+

SUITRUMP is the strongest survivor of every affected coin — down ~20% while sister coins are down 70–100% — precisely because this liquidity is deep, independent of BlueMove, and it held.

4 Is the BlueMove Exploit over? For SUITRUMP — YES.

I checked the broken pool directly. The big faucet drain already happened and took everything — the pool now holds only ~27,816 SUITRUMP (about $0.26). There is nothing meaningful left to drain, and no reason anyone would refill a dead pool with their own tokens. The artificial sell pressure that hit us is spent. As a precaution we are pushing BlueMove to freeze the pool and blacklisting it from our routing so not a single stray sell can ever feed it again.

5 What I've already done — and what comes next

I don't ask this community to hold while I sit on my hands. Since the exploit I have been putting my own capital to work for SUITRUMP:

Action Skin in the game — starting immediately

  • I have personally added $2,000 to SUITRUMP liquidity since the initial exploit.
  • I began unannounced buybacks of SUITRUMP — and today I bought $1,000+ of SUITRUMP on the spot market and moved it straight into the treasury wallet.
  • I will keep buying the token, keep adding liquidity, and incentivise every SUI/SUITRUMP CLMM provider on suidex.org with boosted rewards.
A personal note. I have never let this community down, and I never will — your money is safe with SUITRUMP. Many leaders go quiet in moments like this. I lead from the front. I will fight back against the unfairness, the theft and the immoral actions we have seen on Sui, and this community stands behind me. Mysten should back us. The Sui Foundation should back us. Adeniyi should back us. We will be a shining light for the Sui network until our team, our community and SUITRUMP are undeniable. We took a hit that was never ours to take — and we come back stronger than ever before. SUITRUMP does not fold. We fight back.
— Richie · Mischief Finance / SUITRUMP
SUITRUMP · suitrump.com
Mischief Finance Investigation · Richie · 18 Jul 2026 · Telegram @Richie_Mischief · verify on suiscan.xyz