What is Sui?
Sui (SUI) is a high-performance Layer-1 blockchain and smart contract platform launched in May 2023 by Mysten Labs. (Source: Kraken) The company was founded by five former Meta engineers who previously worked on the Diem blockchain project. (Source: Backpack Learn) Sui was designed to solve the speed and scaling limitations of older networks by utilizing a unique object-centric data model and the "Move" programming language, allowing for near-instant, low-cost transactions optimized for Decentralized Finance (DeFi) and gaming. (Source: Kraken)
Risks Associated to the Digital Asset
Sui (SUI) presents a specific risk profile that investors and market participants must navigate:
Supply Dilution & Unlock Risk: SUI has a capped maximum supply of 10 billion tokens, but a significant majority of this supply remains locked under long-term vesting schedules. (Source: CoinMarketCap) Scheduled monthly unlocks frequently release tens of millions of tokens into circulation, which can introduce substantial short-term selling pressure and price volatility for retail investors as venture capital and team allocations become liquid. (Source: MEXC)
Technological & Unproven Protocol Risk: The Sui network relies on the "Move" programming language, which was originally developed for Meta's Diem project. (Source: CertiK) While designed to prevent common smart contract vulnerabilities like reentrancy attacks (Source: Halborn), it is important to note that Move is a relatively new language and has not yet undergone the same duration of real-world stress-testing as more established smart contract languages like Solidity.
Regulatory & Supply Manipulation Investigation Risk: Highly centralized token distributions can attract severe regulatory scrutiny. In October 2023, South Korea's Financial Supervisory Service (FSS) launched an investigation into the Sui Foundation following lawmaker allegations that the foundation manipulated the token supply by secretly staking locked tokens and selling the generated interest for personal gain. (Source: The Block) The Sui Foundation vehemently denied these claims, labeling them as unfounded and materially false, but the allegations caused the token to drop to an all-time low at the time. (Source: Decrypt)
Trading History of Digital Asset
Market Capitalization & Liquidity: Since its launch in mid-2023, SUI has seen periods of significant volatility but consistently ranks among the top cryptocurrencies by market capitalization. (Source: Capital.com) By 2025, it had surpassed $500 million in Total Value Locked (TVL) and frequently exceeded $50 million in daily decentralized exchange volume, establishing deep market liquidity. (Source: Rango Exchange)
Institutional & Ecosystem Integration: The surge in SUI's TVL was fundamentally driven by the rapid growth of DeFi platforms on its network, such as Cetus, NAVI, and Suilend, attracting significant institutional liquidity. (Source: Canary Capital) The project also secured massive early backing from major venture capital firms, including a $300 million Series B funding round led by a16z, Binance Labs, and Coinbase Ventures. (Source: Backpack Learn)
Incidents of Manipulation or Security Failures
Sui operates using a delegated proof-of-stake (dPoS) consensus system powered by algorithms called Narwhal and Bullshark. (Source: Canary Capital) Unlike traditional blockchains like Ethereum that process transactions sequentially, Sui executes independent transactions in parallel. (Source: Kraken) Because it treats digital assets as distinct, independent "objects," transactions that do not involve the same objects can be processed simultaneously without waiting for global network consensus, dramatically increasing network throughput and reducing latency. (Source: Kraken)
From a security and operational standpoint, the blockchain is highly resilient against traditional congestion bottlenecks due to this object-isolation design. (Source: BDS Blog) However, operational controversies have primarily stemmed from its foundation's governance practices. (Source: ForkLog) The 2023 South Korean investigation highlighted the operational risks of centralized entities controlling large portions of non-circulating supply, raising concerns that locked tokens were being illicitly staked to artificially inflate circulation and generate unauthorized yield. (Source: Binance Square)
Token Ownership Concentration
SUI has a fixed maximum supply of 10 billion tokens, which was entirely defined at genesis. (Source: Canary Capital) At its mainnet launch in 2023, only a very small fraction (roughly 6%) of the total supply was actively circulating, with the remainder subjected to multi-year vesting lock-ups. (Source: Canary Capital)
The massive 10 billion token supply was allocated with heavy concentration toward insiders and ecosystem treasuries:
Community Reserve (managed by the Sui Foundation): 50%, allocated for grants and ecosystem development. (Source: Mintlify)
Early Contributors: 20%, representing the founding team members subject to vesting schedules. (Source: Mintlify)
Investors (Series A & B): 14%, for private venture capital participants with lock-up periods. (Source: Mintlify)
Mysten Labs Treasury: 10%, reserved for ongoing corporate operations. (Source: Mintlify)
Community Access Program: 6%, distributed through community sale events. (Source: Mintlify)
Because nearly half the supply is controlled by early contributors and private investors, the asset possesses extreme structural ownership concentration. (Source: CoinGecko) The staggered vesting schedules mean that large batches of tokens will continue unlocking over multiple years (generally spanning 4 to 7 years), requiring constant market surveillance to assess selling pressure from venture capital entities as they realize their investments. (Source: Canary Capital)
Security Audit
Based on the established regulatory framework, SUI operates a proprietary Layer-1 blockchain utilizing an object-centric architecture and a Delegated Proof of Stake (DPoS) consensus mechanism. Because the network relies on dynamic validator participation, parallel transaction execution, and Move-based smart contracts, its security posture requires comprehensive auditing across protocol infrastructure, validator operations, smart contract frameworks, and ecosystem applications.
Protocol and Consensus Security
SUI operates a native Layer-1 blockchain network
Utilizes a Delegated Proof of Stake (DPoS) consensus mechanism
Employs an object-centric data model for transaction processing
Supports parallel transaction execution to improve scalability
Security assessments focus on consensus integrity and validator coordination
Protocol reviews evaluate resistance against malicious forks
Audits assess denial-of-service attack resilience
Security testing evaluates consensus manipulation risks
Validator infrastructure forms a critical component of network security
Core Infrastructure Audits
Halborn conducted the foundational audit of Sui Core in April 2023
Audit scope included the consensus engine
Audit scope included validator infrastructure
Audit scope included underlying network architecture
Security assessments reviewed protocol-level attack surfaces
Core infrastructure audits support long-term network resilience
Findings contributed to strengthening protocol security controls
Official Ecosystem Audit Partners
OtterSec serves as an official Sui ecosystem audit partner
Zellic serves as an official Sui ecosystem audit partner
Partnership was formally announced by the Sui Foundation in December 2023
Auditors provide ongoing reviews of ecosystem infrastructure
Audit coverage includes the Move bytecode verifier
Audit coverage includes the Sui Adapter
Audit coverage includes core framework contracts
Audit coverage includes DeepBook infrastructure
Audit coverage extends to DeFi protocol integrations
Move Smart Contract Security
Smart contracts are developed using the Sui Move programming language
Auditors evaluate contract logic and execution behaviour
Security reviews assess asset management mechanisms
Testing identifies potential minting vulnerabilities
Reviews assess liquidity-drain attack vectors
Audits evaluate permission and access-control frameworks
Contract-level reviews help reduce exploitation risks
Ongoing audits support ecosystem-wide security standards
zkLogin Security Framework
zkLogin enables blockchain authentication using OAuth credentials
Supports integrations with providers such as Google and Apple
Authentication occurs without exposing sensitive personal information
Utilizes Groth16 zkSNARK cryptographic proofs
zkLogin infrastructure underwent independent security audits
Specialist zero-knowledge cryptography firms reviewed implementation security
Common reference string generation involved a public ceremony
More than 100 participants contributed to setup generation
Bug Bounty Programme
Sui Foundation maintains an active bug bounty programme
Programme is operated in partnership with Immunefi
Initial launch occurred in April 2023
Maximum reward currently reaches $1,000,000 for critical vulnerabilities
Reward cap was increased from $500,000 during 2025
Programme covers core Sui infrastructure vulnerabilities
Eligible ecosystem protocols may also qualify for coverage
Coverage extends to protocols exceeding specified TVL thresholds
Crowdsourced security research strengthens ecosystem resilience
Ecosystem Security Monitoring
Security oversight extends beyond core protocol infrastructure
Audits support rapidly expanding DeFi applications
Security reviews cover Web3 gaming integrations
Ecosystem projects benefit from ongoing third-party assessments
Continuous security research helps identify emerging risks
Community participation complements professional auditing efforts
Security disclosures support responsible vulnerability remediation
The combination of Halborn’s protocol audit, ongoing reviews by OtterSec and Zellic, independent assessments of zkLogin infrastructure, and a substantial Immunefi bug bounty programme provides SUI with one of the most comprehensive security frameworks among Layer-1 blockchain networks. However, as a rapidly growing ecosystem supporting DeFi, gaming, and advanced Move-based applications, ongoing smart contract audits, validator security, and ecosystem monitoring remain critical to maintaining long-term network security.
Sources
Sui Developer Documentation – Architecture
Sui Foundation Security Audits Repository
BusinessWire – Sui Partners With Leading Web3 Audit Firms OtterSec and Zellic
Binance Academy – What Is Sui?
The information provided here is presented "as is" and is intended for general informational and educational purposes only. It does not come with any representation or warranty of any kind. This content should not be interpreted as financial, legal, or other professional advice, and it is not intended to endorse or recommend the purchase of any specific product or service. It is advisable to consult with appropriate professional advisors for personalized guidance. In cases where the article is contributed by a third-party author, please note that the expressed views belong to the author alone and may not necessarily reflect the opinions of Hata. For further details, we encourage you to read our complete disclaimer. Please be aware that the prices of digital assets can be highly volatile. The value of your investment may increase or decrease, and there is a risk that you may not recover the full amount invested. You are solely responsible for making your own investment decisions, and Hata cannot be held liable for any losses you may incur. This material is not to be construed as financial, legal, or other professional advice. For more information, please refer to Hata’s Term of Use and Risk Warning.