Sui is a Layer-1 blockchain platform designed to support fast and secure smart contract execution. Unlike traditional blockchains that group transactions into batches or blocks, Sui processes most transactions in parallel, significantly boosting its transaction throughput and efficiency. This approach allows it to handle simple transactions more rapidly by bypassing complex consensus mechanisms using lightweight algorithms. Sui is built using the Rust programming language and supports smart contracts developed in Sui Move, a specialized version of the Move programming language. This unique setup allows for innovative applications, particularly those requiring low-latency operations such as gaming or retail payments, to thrive on its network due to its object-centric data model, ensuring scalability and ease of use.

Sui was created by Mysten Labs, which was established in 2021 by former leads of Facebook's Diem/Novi projects. The Sui project was unveiled in March 2022. Key founders include Evan Cheng, Sam Blackshear, Adeniyi Abiodun, George Danezis, and Kostas Chalkias. These founders bring experience from major tech companies such as Apple, Oracle, Microsoft, and Facebook, with expertise in areas like software language compilers, cryptography, and cloud computing.

You can natively stake SUI tokens in the Sui project. Here are the details:

• Staking Mechanism: Sui employs a Delegated Proof-of-Stake (DPoS) system.

• Tokens Staked: Only SUI tokens can be staked.

• Process:

  • SUI token holders can delegate their tokens to validators.
  • Staked tokens are locked for the entire epoch, and staking rewards are distributed at its end.
  • Users may withdraw or adjust their stake at the start of a new epoch.

• Rewards:

  • Stakers receive rewards from stake rewards distributed on the network (comprising computation fees, storage fund rewards, and reward subsidies).
  • The annualized real yield for SUI staking is slightly below zero due to high staking rates.
  • Rewards are subject to staking rate and validator performance.

• Validator System:

  • The voting power on the network is fixed at 10,000 units, with individual validators capped at 1,000.
  • Sui Foundation supports fair staking distribution to maintain decentralized validator operations.

Overall, staking SUI contributes to network security and can earn participants rewards, although potential yield might be minimal depending on the network's economic conditions.

The Sui project experienced a significant security breach in January 2024, resulting in the theft of $29 million. This incident occurred within the native protocol and involved the stolen assets being transferred to the Ethereum network utilizing a bridge and Tornado Cash. This breach highlighted the need for enhanced security measures, prompting the Sui Foundation to partner with security firms like Blockaid to bolster ecosystem security and address potential protocol-level threats source.

The Sui project implements several unique security measures and faces certain vulnerabilities. Here are the key security aspects and vulnerabilities:

Security Measures

1. SCION Integration: Sui integrates SCION, a next-generation internet architecture enhancing validator communication and reducing vulnerabilities like BGP hijacking. SCION's path-aware networking offers route control, failure isolation, and explicit trust information, improving performance and security (source).

2. Blockaid Partnership: The Sui Foundation partnered with Blockaid to bolster security across its ecosystem. This partnership focuses on safeguarding wallets and addressing smart contract exploits and off-chain threats (source).

3. Chainalysis Collaboration: Sui teamed up with Chainalysis to enhance blockchain security and compliance. This partnership aims to monitor addresses and prevent illicit transactions by integrating with the Sui Guardian program, increasing transparency and security (source).

4. Move Programming Language: Sui uses the Move programming language, which offers enhanced security by mitigating common vulnerabilities found in other languages like Solidity. Its object-centric data model allows parallel transaction processing, increasing efficiency and reducing vulnerabilities (source).

5. Regular Security Audits: Sui has undergone audits by firms like Halborn and Zellic, ensuring the identification and mitigation of potential security issues. These audits are crucial for maintaining a robust security posture (source).

6. Mechanisms for MEV Management: Sui is implementing measures for managing Maximum Extractable Value (MEV) to ensure transaction protection. Innovations like time-lock encryption and priority gas auctions are part of these efforts (source).

Vulnerabilities

1. Theft in 2024: Sui faced a $29 million theft in January 2024, highlighting the need for improved analyses tools despite its robust security posture (source).

2. Denial-of-service (DoS) Vulnerability: Discovered vulnerabilities could cause nodes to crash from depleted memory, requiring ongoing attention to protocol security (source).

3. General Threats and Ongoing Challenges: Despite the mitigating mechanisms of the Move language, security audits continue to be necessary to address potential protocol-level threats and business logic security (source).

These measures demonstrate Sui's comprehensive approach to security, emphasizing preventative partnerships and technological innovations while acknowledging past vulnerabilities as part of its ongoing evolution.

Here is a list of audits for the Sui project, ordered chronologically from most recent:

• January 16, 2025: Hashlock completed a second external audit of the Sui Move contracts for Balanced and ICON's General Message Passing source.
• November 14, 2023: Ottersec performed an audit on the volo-liquid-staking contracts source.
• October 11, 2023: Critical Section conducted an audit of Sui Wallet's zkLogin components source.
• October 9, 2023: Blaize.Security performed a security audit of the Rust Multisig SDK source.
• September 11, 2023: zkSecurity audited Sui's zkLogin circuits and ceremony source.
• August 31, 2023: Blaize.Security examined the security of the Sui TypeScript SDK source.
• June 2023: FYEO conducted a security assessment of sui-system's staking code in Move source.
• April 7, 2023: Common Prefix audited BLS12381, ECVRF, Ristretto255, and secp256k1 implementations in Sui's fastcrypto library source.

The audits are a crucial part of ensuring the security and functionality of the Sui project, and these reports demonstrate an ongoing commitment to security by utilizing a variety of expert auditing firms.