Aftermath Finance's perpetual futures on Sui exploited for $1.14M via missing validation in fee accounting. Attackers set negative builder code fees to inflate synthetic collateral, enabling unauthorized vault withdrawals.