On October 15, 2025, Typus Finance's custom price oracle was exploited via missing assertion logic and improper access control. The attacker called update_v2 to arbitrarily set token pair prices to extreme values and drained $3.44M in SUI, USDC, xBTC, and suiETH.