# Latest **URL:** https://forums.sui.io/latest.md [Latest](https://forums.sui.io/latest.md) · [Categories](https://forums.sui.io/categories.md) · [Tags](https://forums.sui.io/tags.md) --- ## [Building no-loss prize staking on Sui: what the object model made easy (and what it didn't)](https://forums.sui.io/t/building-no-loss-prize-staking-on-sui-what-the-object-model-made-easy-and-what-it-didnt/49447)
**Author:** [@surgeon](https://forums.sui.io/u/surgeon)\ **Replies:** 0\ **Last updated:** [September 15, 2026, 12:24pm UTC](https://forums.sui.io/t/building-no-loss-prize-staking-on-sui-what-the-object-model-made-easy-and-what-it-didnt/49447 "2026-09-15T12:24:38Z")
I’ve been building Surge Protocol solo for the past few months — a no-loss prize-staking vault on Sui Mainnet. Think Premium Bonds, on-chain: you stake SUI, your principal never leaves the vault, and only the staking yie… --- ## [Interactive Transaction Request Protocol](https://forums.sui.io/t/interactive-transaction-request-protocol/49405)
**Author:** [@kodaxx](https://forums.sui.io/u/kodaxx)\ **Replies:** 8\ **Last updated:** [September 14, 2026, 10:58pm UTC](https://forums.sui.io/t/interactive-transaction-request-protocol/49405 "2026-09-14T22:58:59Z")
Improvement Idea: Interactive Transaction Request Protocol Problem: Sui’s existing payment URI scheme works well when payment details can be determined in advance. However, it does not provide a neutral way for a merch… --- ## [Let's complete this security tool with the help of the community](https://forums.sui.io/t/lets-complete-this-security-tool-with-the-help-of-the-community/49403)
**Author:** [@mehvetero](https://forums.sui.io/u/mehvetero)\ **Replies:** 7\ **Last updated:** [September 11, 2026, 12:29am UTC](https://forums.sui.io/t/lets-complete-this-security-tool-with-the-help-of-the-community/49403 "2026-09-11T00:29:30Z")
Built an open-source security linter for Sui Move — 6 rules (access control, unchecked arithmetic, unsafe downcast, discarded auth checks, shared abort codes). Validated on SuiTears, Bucket, Typus. Looking for feedback f… --- ## [Slush - address stability and signature reproducibility across sessions?](https://forums.sui.io/t/slush-address-stability-and-signature-reproducibility-across-sessions/49439)
**Author:** [@pocket\_change0906](https://forums.sui.io/u/pocket_change0906)\ **Replies:** 0\ **Last updated:** [September 6, 2026, 3:20am UTC](https://forums.sui.io/t/slush-address-stability-and-signature-reproducibility-across-sessions/49439 "2026-09-06T03:20:42Z")
zkLogin via Slush - address stability and signature reproducibility across sessions? Building a paid single-session web app on Sui. A person pays, and may stop mid-way and come back days later to finish. Payment is USDC… --- ## [Something I keep seeing in Sui Move audits that deserves more attention](https://forums.sui.io/t/something-i-keep-seeing-in-sui-move-audits-that-deserves-more-attention/49437)
**Author:** [@mehvetero](https://forums.sui.io/u/mehvetero)\ **Replies:** 0\ **Last updated:** [September 5, 2026, 5:37pm UTC](https://forums.sui.io/t/something-i-keep-seeing-in-sui-move-audits-that-deserves-more-attention/49437 "2026-09-05T17:37:01Z")
Something I keep seeing in Sui Move audits that deserves more attention: \<\< and \>\> don’t abort on overflow. Everything else in Move does — addition, subtraction, multiplication all halt the transaction if they overfl… --- ## [Slush web wallet: signPersonalMessage builds an expired zkLogin envelope](https://forums.sui.io/t/slush-web-wallet-signpersonalmessage-builds-an-expired-zklogin-envelope/49422)
**Author:** [@coltrane\_ai](https://forums.sui.io/u/coltrane_ai)\ **Replies:** 3\ **Last updated:** [September 3, 2026, 1:25pm UTC](https://forums.sui.io/t/slush-web-wallet-signpersonalmessage-builds-an-expired-zklogin-envelope/49422 "2026-09-03T13:25:10Z")
hi, not sure if this post is best here, or on the Sui discord, Slush web wallet: signPersonalMessage builds an expired zkLogin envelope Evidence package - 25 Aug 2026. Ready to file to Slush / Mysten Labs. One sentence: … --- ## [How $951 Bought a $8.5M Vote: The Term Finance Governance Exploit](https://forums.sui.io/t/how-951-bought-a-8-5m-vote-the-term-finance-governance-exploit/49424)
**Author:** [@mehvetero](https://forums.sui.io/u/mehvetero)\ **Replies:** 0\ **Last updated:** [August 27, 2026, 1:57am UTC](https://forums.sui.io/t/how-951-bought-a-8-5m-vote-the-term-finance-governance-exploit/49424 "2026-08-27T01:57:10Z")
\*Zero bugs. Zero hacks. Just a vote.\* On August 23, 2026, at 06:25 UTC, an attacker executed a single parameterless function call on Ethereum and walked away with $8.5 million from Term Finance’s vaults. No exploit in t… --- ## [The first live x402 facilitator on Sui — agents pay USDC per API call, verified humans read free](https://forums.sui.io/t/the-first-live-x402-facilitator-on-sui-agents-pay-usdc-per-api-call-verified-humans-read-free/49391)
**Author:** [@drvelvetfog](https://forums.sui.io/u/drvelvetfog)\ **Replies:** 6\ **Last updated:** [August 24, 2026, 1:24pm UTC](https://forums.sui.io/t/the-first-live-x402-facilitator-on-sui-agents-pay-usdc-per-api-call-verified-humans-read-free/49391 "2026-08-24T13:24:55Z")
x402 is the Linux Foundation’s open standard for HTTP-native payments (founding members include Google, Visa, Stripe, Circle). A client gets HTTP 402 Payment Required, signs a payment, retries, and gets the resource. It’… --- ## [An x402 client SDK + middleware for Sui (testnet, feedback wanted)](https://forums.sui.io/t/an-x402-client-sdk-middleware-for-sui-testnet-feedback-wanted/49421)
**Author:** [@yannickrocks](https://forums.sui.io/u/yannickrocks)\ **Replies:** 0\ **Last updated:** [August 24, 2026, 10:22am UTC](https://forums.sui.io/t/an-x402-client-sdk-middleware-for-sui-testnet-feedback-wanted/49421 "2026-08-24T10:22:21Z")
Stripe shipped Machine Payments in Feb 2026. AWS made CloudFront/WAF x402-aware in June. Both use the same open Linux Foundation spec, x402. Sui already has an exact scheme in that spec and one solid open-source facilita… --- ## [How a Missing \`assert!\` Drained $3.44M From Typus Finance — and Why the Code Looked Correct](https://forums.sui.io/t/how-a-missing-assert-drained-3-44m-from-typus-finance-and-why-the-code-looked-correct/49420)
**Author:** [@mehvetero](https://forums.sui.io/u/mehvetero)\ **Replies:** 0\ **Last updated:** [August 17, 2026, 8:39am UTC](https://forums.sui.io/t/how-a-missing-assert-drained-3-44m-from-typus-finance-and-why-the-code-looked-correct/49420 "2026-08-17T08:39:54Z")
On October 15, 2025, at 13:05 UTC, an attacker began draining Typus Finance’s TLP liquidity pool on the Sui network. Thirty-four minutes later, the contracts were paused — but the pool was already empty. Over the hour… --- ## [A Sui app to share files you can revoke after sending — seeking feedback.](https://forums.sui.io/t/a-sui-app-to-share-files-you-can-revoke-after-sending-seeking-feedback/49393)
**Author:** [@Andres](https://forums.sui.io/u/Andres)\ **Replies:** 3\ **Last updated:** [August 12, 2026, 3:39am UTC](https://forums.sui.io/t/a-sui-app-to-share-files-you-can-revoke-after-sending-seeking-feedback/49393 "2026-08-12T03:39:53Z")
Hi all — I’m an independent builder, and I’d love feedback on something I made on the Sui stack, plus some guidance on next steps. Elur is a native macOS app for governed file sharing. You encrypt a file on your own dev… --- ## [BlueMove Was Not an Overflow Bug — How a Cross-Version Reserve Desync Drained 714,000 SUI](https://forums.sui.io/t/bluemove-was-not-an-overflow-bug-how-a-cross-version-reserve-desync-drained-714-000-sui/49409)
**Author:** [@mehvetero](https://forums.sui.io/u/mehvetero)\ **Replies:** 0\ **Last updated:** [August 11, 2026, 7:21pm UTC](https://forums.sui.io/t/bluemove-was-not-an-overflow-bug-how-a-cross-version-reserve-desync-drained-714-000-sui/49409 "2026-08-11T19:21:21Z")
On July 11, 2026, at 22:13 UTC, an attacker began draining liquidity pools on BlueMove DEX, a Sui-based AMM. Within 23 minutes, approximately 714,000 SUI — roughly $528,000 at the time — had crossed a Wormhole bridge … --- ## [7K Aggregator routing issue - Request for engineering review](https://forums.sui.io/t/7k-aggregator-routing-issue-request-for-engineering-review/49389)
**Author:** [@luchodantini](https://forums.sui.io/u/luchodantini)\ **Replies:** 6\ **Last updated:** [August 11, 2026, 2:53pm UTC](https://forums.sui.io/t/7k-aggregator-routing-issue-request-for-engineering-review/49389 "2026-08-11T14:53:35Z")
7K Aggregator routing issue - Request for engineering review Hello, I am requesting help from the Sui ecosystem because I have been unable to reach the 7K Aggregator team. I have already tried: Email X (Twitter) … --- ## [zkLogin salt service: are salts stored or derived from a master secret?](https://forums.sui.io/t/zklogin-salt-service-are-salts-stored-or-derived-from-a-master-secret/49379)
**Author:** [@SessionCruz](https://forums.sui.io/u/SessionCruz)\ **Replies:** 2\ **Last updated:** [August 10, 2026, 9:23pm UTC](https://forums.sui.io/t/zklogin-salt-service-are-salts-stored-or-derived-from-a-master-secret/49379 "2026-08-10T21:23:07Z")
I’m evaluating zkLogin for a protocol where users hold assets long term, and I’d like to understand the durability model before designing around it. The address derives from the user’s OAuth sub and a salt. I’ve confirm… --- ## [Open source Sui Move security scanner + live exploit monitor, tested against 7 protocols including the Cetus exploit pattern](https://forums.sui.io/t/open-source-sui-move-security-scanner-live-exploit-monitor-tested-against-7-protocols-including-the-cetus-exploit-pattern/49387)
**Author:** [@Nanojs10](https://forums.sui.io/u/Nanojs10)\ **Replies:** 2\ **Last updated:** [July 29, 2026, 9:13am UTC](https://forums.sui.io/t/open-source-sui-move-security-scanner-live-exploit-monitor-tested-against-7-protocols-including-the-cetus-exploit-pattern/49387 "2026-07-29T09:13:37Z")
Introducing SuiSentinel: open source Sui Move security scanner + live exploit monitor Hey everyone, sharing a project I’ve been building: SuiSentinel, an open source security pipeline for Sui Move contracts. It does two… --- ## [Interest Labs (@IPXLabs) - official Sui validator - withdrew user funds from its Interest Protocol pools on Movement](https://forums.sui.io/t/interest-labs-ipxlabs-official-sui-validator-withdrew-user-funds-from-its-interest-protocol-pools-on-movement/49385)
**Author:** [@just1](https://forums.sui.io/u/just1)\ **Replies:** 1\ **Last updated:** [July 29, 2026, 12:34am UTC](https://forums.sui.io/t/interest-labs-ipxlabs-official-sui-validator-withdrew-user-funds-from-its-interest-protocol-pools-on-movement/49385 "2026-07-29T00:34:58Z")
Interest Labs (@IPXLabs) — official Sui validator — withdrew user funds from its Interest Protocol pools on Movement Fact sheet — 2026-07-26 The validator Interest Labs is an official Sui Network validator. Voting pow… --- ## [Atomic multi-source agent payments via Sui PTBs (Quikt design notes)](https://forums.sui.io/t/atomic-multi-source-agent-payments-via-sui-ptbs-quikt-design-notes/49286)
**Author:** [@kite-builds](https://forums.sui.io/u/kite-builds)\ **Replies:** 2\ **Last updated:** [July 28, 2026, 5:17pm UTC](https://forums.sui.io/t/atomic-multi-source-agent-payments-via-sui-ptbs-quikt-design-notes/49286 "2026-07-28T17:17:57Z")
Hi — first post here. Sharing the design notes behind Quikt, a Sui-native primitive for atomic multi-source agent payments. Built for Sui Overflow 2026 (Agentic Web track), live on testnet, MIT. Repo: GitHub - kite-buil… --- ## [Accessing struct fields inside tests](https://forums.sui.io/t/accessing-struct-fields-inside-tests/47870)
**Author:** [@DoubleJabber](https://forums.sui.io/u/DoubleJabber)\ **Replies:** 7\ **Last updated:** [July 28, 2026, 12:55pm UTC](https://forums.sui.io/t/accessing-struct-fields-inside-tests/47870 "2026-07-28T12:55:11Z")
Hello people, I have just begun working in Move and I am having trouble writing tests, due to the visibility constraints. When I started writing out the contract, the tests were within the same module and things worked f… --- ## [Self hosted fullnode migrate from JSON-RPC to gRPC](https://forums.sui.io/t/self-hosted-fullnode-migrate-from-json-rpc-to-grpc/49349)
**Author:** [@spin](https://forums.sui.io/u/spin)\ **Replies:** 1\ **Last updated:** [July 10, 2026, 3:31am UTC](https://forums.sui.io/t/self-hosted-fullnode-migrate-from-json-rpc-to-grpc/49349 "2026-07-10T03:31:45Z")
I run a self-hosted SUI fullnode and plan to migrate from JSON-RPC to gRPC or GraphQL RPC. When I enable gRPC indexing, got logs below, then Jul 10 02:18:38 sui01-stg sui-node\[1210176\]: 2026-07-10T02:18:38.503234Z WAR… --- ## [PTB, adminCap and object owners](https://forums.sui.io/t/ptb-admincap-and-object-owners/49058)
**Author:** [@Maars](https://forums.sui.io/u/Maars)\ **Replies:** 1\ **Last updated:** [June 27, 2026, 4:22pm UTC](https://forums.sui.io/t/ptb-admincap-and-object-owners/49058 "2026-06-27T16:22:41Z")
Hi there. I have been cracking my head over last few days to try and do few thing and I really can’t find my way out so I need to ask a few questions to make it maybe more clear for me if there are limitations that are … --- ## [Choosing an auditor](https://forums.sui.io/t/choosing-an-auditor/49331)
**Author:** [@PrimitiveLineworks](https://forums.sui.io/u/PrimitiveLineworks)\ **Replies:** 1\ **Last updated:** [June 25, 2026, 6:14am UTC](https://forums.sui.io/t/choosing-an-auditor/49331 "2026-06-25T06:14:37Z")
Hi all, I’m currently working on a project that is essentially a low-risk LP vault. I’d like to include reference to specific auditors in the business plan/roadmap, so I’d appreciate any recommendations - both for audi… --- ## [Faucet Rate Limit Exception — Automated E2E Testing for toodigital](https://forums.sui.io/t/faucet-rate-limit-exception-automated-e2e-testing-for-toodigital/49262)
**Author:** [@akiratata](https://forums.sui.io/u/akiratata)\ **Replies:** 2\ **Last updated:** [June 23, 2026, 3:14pm UTC](https://forums.sui.io/t/faucet-rate-limit-exception-automated-e2e-testing-for-toodigital/49262 "2026-06-23T15:14:14Z")
I’m building \*\*toodigital\*\*, a native music distribution app (Flutter + Rust) fully on Sui — zkLogin onboarding, Move contract catalog (sale/listing/catalog), decentralized vendor shops, and NFT purchases with fiat settl… --- ## [What is the package id, object id, master pub key and the hbtc coin type for hashi on devnet?](https://forums.sui.io/t/what-is-the-package-id-object-id-master-pub-key-and-the-hbtc-coin-type-for-hashi-on-devnet/49259)
**Author:** [@29b04e790f992d74fd4e](https://forums.sui.io/u/29b04e790f992d74fd4e)\ **Replies:** 2\ **Last updated:** [June 23, 2026, 3:13pm UTC](https://forums.sui.io/t/what-is-the-package-id-object-id-master-pub-key-and-the-hbtc-coin-type-for-hashi-on-devnet/49259 "2026-06-23T15:13:07Z")
I can’t find the package id, object id, master pub key and the hbtc coin type for hashi on devnet? Can someone help? --- ## [Transaction gas payment missing](https://forums.sui.io/t/transaction-gas-payment-missing/49218)
**Author:** [@bentleylux](https://forums.sui.io/u/bentleylux)\ **Replies:** 3\ **Last updated:** [June 23, 2026, 3:11pm UTC](https://forums.sui.io/t/transaction-gas-payment-missing/49218 "2026-06-23T15:11:22Z")
i want to send tx use address balance as gas, and i keep gas payment is empty, but i get the error Error checking transaction input objects: Transaction gas payment missing", details: b"\\x08\\x03\\x12IErro, any help about … --- ## [GRPC Transaction building](https://forums.sui.io/t/grpc-transaction-building/49264)
**Author:** [@felix11](https://forums.sui.io/u/felix11)\ **Replies:** 2\ **Last updated:** [June 23, 2026, 3:08pm UTC](https://forums.sui.io/t/grpc-transaction-building/49264 "2026-06-23T15:08:39Z")
Can anyone give me an example of how we can execute transaction using GRPC in rust? I’m stuggling to create the Transaction object which is taken as input in GRPC transaction execution method. --- ## [GraphQL: native staking — estimatedReward per StakedSui (parity with suix\_getStakes)?](https://forums.sui.io/t/graphql-native-staking-estimatedreward-per-stakedsui-parity-with-suix-getstakes/49257)
**Author:** [@captivating\_seahorse](https://forums.sui.io/u/captivating_seahorse)\ **Replies:** 2\ **Last updated:** [June 23, 2026, 2:58pm UTC](https://forums.sui.io/t/graphql-native-staking-estimatedreward-per-stakedsui-parity-with-suix-getstakes/49257 "2026-06-23T14:58:46Z")
Hi — we’re migrating our wallet app from JSON-RPC to GraphQL (graphql.mainnet.sui.io) before RPC deprecation. For native staking, suix\_getStakes returned per-position fields like principal and estimatedReward. On the pu… --- ## [Seal Integration Details](https://forums.sui.io/t/seal-integration-details/49329)
**Author:** [@olien](https://forums.sui.io/u/olien)\ **Replies:** 2\ **Last updated:** [June 22, 2026, 6:30am UTC](https://forums.sui.io/t/seal-integration-details/49329 "2026-06-22T06:30:47Z")
Hi team I’m building Cortex (sovereign memory for AI agents on Sui + Walrus + Seal), live on mainnet. I’m integrating Seal for threshold encryption and want to use the official mainnet committee key server: Committee … --- ## [Sui move build MVR issue](https://forums.sui.io/t/sui-move-build-mvr-issue/49310)
**Author:** [@GiFTED](https://forums.sui.io/u/GiFTED)\ **Replies:** 5\ **Last updated:** [June 4, 2026, 1:52pm UTC](https://forums.sui.io/t/sui-move-build-mvr-issue/49310 "2026-06-04T13:52:31Z")
sui move build Output from mvr: │ error: unexpected argument '--resolve-deps' found │ │ tip: a similar argument exists: '--resolve-move-dependencies' │ │ Usage: mvr \<--resolve-move-dependencies \ **Author:** [@aoliao\_40259](https://forums.sui.io/u/aoliao_40259)\ **Replies:** 2\ **Last updated:** [June 3, 2026, 9:12am UTC](https://forums.sui.io/t/gasless-stablecoin-transfers-golang/49304 "2026-06-03T09:12:42Z") I want to implement Gasless Stablecoin Transfers functionality using golang. Are there any relevant examples? --- ## [Hosted zkLogin prover: Google OAuth audience not supported on Testnet](https://forums.sui.io/t/hosted-zklogin-prover-google-oauth-audience-not-supported-on-testnet/49289)
**Author:** [@abhay\_pratap1](https://forums.sui.io/u/abhay_pratap1)\ **Replies:** 1\ **Last updated:** [June 2, 2026, 10:50am UTC](https://forums.sui.io/t/hosted-zklogin-prover-google-oauth-audience-not-supported-on-testnet/49289 "2026-06-02T10:50:00Z")
Hi Sui/Mysten team, I’m building a Sui Overflow hackathon project using zkLogin on Sui Testnet. Could you please help allowlist this Google OAuth client ID / audience for the hosted zkLogin prover? Google OAuth client… [Next page](https://forums.sui.io/latest.md?page=1)