Sui’s native USDC and Mysticeti performance redefine Move DeFi
Sui's Mysticeti protocol reduced consensus latency to 390 milliseconds on the testnet, while Cetus Protocol faced a $223 million smart contract exploit. Movement Labs' M2 Ethereum L2 has attracted $160 million in committed total value locked during its public testnet phase.
Sui liquidity and consensus efficiency
Sui users access native USDC through a partnership between the Sui Foundation and Circle. This integration removes the need for external bridges and reduces risks from lock-and-mint mechanisms. Cetus Protocol, the largest liquidity provider on Sui, lost $223 million in a smart contract exploit where an attacker used a SwapCallback function that failed to verify the caller. The attack began on May 18, when abnormal transactions appeared, and by May 20, the team confirmed the $223 million loss. The attacker executed a complex cross-pool transaction path, dismantling liquidity and performing arbitrage without restriction. This event instantly wiped 50% of the total value locked on the Sui network. The Sui Foundation and Cetus team worked to freeze $162 million of the stolen funds, leaving approximately $60 million to be recovered. A freeze operation on Sui requires a vote from 150 validators with over two-thirds consensus. The Cetus incident, which involved a flaw in the SwapCallback function that failed to verify the identity of the caller, resulted in the loss of $223 million and a 50% drop in Sui’s total value locked. While the Cetus exploit damaged trust, the Mysticeti protocol reduced consensus latency to 390 milliseconds on the testnet. This reduction helps process shared object transactions faster. The Cetus exploit remains a massive failure in smart contract security.
Movement and Aptos compete for Move adoption
Movement Labs builds the M2 Ethereum L2 using Celestia for data availability. The public testnet attracted $160 million in committed total value locked, including $100 million from Solv Protocol and $60 million from new investors. Aptos uses an address-centric Move implementation, which differs from the object-centric model on Sui. Movement Labs aims to link MoveVM rollups with Ethereum liquidity. You should monitor if the M2 settlement bridge can match the liquidity depth of Sui’s native assets.
| Feature | Sui (Mysticeti) | Movement (M2) |
|---|---|---|
| Consensus Latency | 390 milliseconds | Not disclosed |
| Ecosystem TVL | $430 million | $160 million |
| Logic Model | Object-centric | Address-centric |
The differences between Sui and Aptos remain visible in their gas mechanisms and programming models. Sui validators vote on network-wide gas prices at the start of each epoch to maintain low costs. Validators who provide high prices receive a penalty in the form of a deduction of part of the reward. Six projects have already deployed on the Movement testnet, including Echelon, Moveposition, Meridian, Avitus, BRKT, and Infinite Seas. Movement Labs raised $38 million in Series A funding led by Polychain Capital to support these developments. Will the M2 settlement bridge manage to bridge the liquidity gap between Move and Ethereum?
Regulatory and custody realities
Regulators in Brazil and the United States modified self-custody reporting rules this October. Brazil’s central bank issued Resolution BCB No. 588, which requires reporting for transfers of $10,000 or more from self-custody wallets starting October 1, 2026. On October 5, 2026, the US Treasury Department’s FinCEN withdrew a rule that would have classified all crypto mixer transactions as a primary money-laundering concern. These regulatory shifts follow a period where phishing attacks caused 83 percent of stolen funds in 2025. The US Treasury’s withdrawal removes the federal mechanism to monitor mixing-linked transactions at the institutional level. Three agencies, including the Fed and the SEC, move toward implementation rules with a January 18, 2027 deadline. The Fed published two NPRMs in September implementing the GENIUS Act stablecoin framework for state member banks. In the European Union, the Travel Rule requires sender and beneficiary data for every transfer. South Korea also requires exchanges to monitor for fraud and suspend accounts, while Russia limits retail crypto purchases to an annual cap of $3,000. Australia requires full compliance with no minimum amount, and the United Kingdom proposes capping sterling stablecoin holdings at £20,000.
Join the discussion