Full Sail to Shut Down After Switchboard Oracle Incident – How Sui DeFi Users Can Get Funds Back

Full Sail, a decentralized finance protocol built on the Sui blockchain, is shutting down after a security incident involving oracle provider Switchboard led to losses across its automated vaults — the latest reminder that in DeFi, the weakest link is often not the protocol you deposit into, but the one it depends on.

By Priya Sharma | September 2, 2026

The Hook: A Protocol Winds Down After an Oracle Failure

Full Sail announced on X on Tuesday that it is winding down operations. New deposits and liquidity provider reward claims were disabled immediately, and regular pools will move to withdrawal-only mode once final security checks are complete. The protocol said compensating users is its top priority.

The trigger was a security incident last week that hit Full Sail’s automated vaults after a suspected compromise of Switchboard’s oracle infrastructure. An oracle is a third-party service that feeds real-world price data to blockchain applications — think of it as the ticker tape that DeFi protocols use to decide what your collateral is worth. If the ticker lies, the protocol makes catastrophically wrong decisions.

Full Sail first disclosed the incident on Saturday, confirming a loss of funds and pausing deposits and withdrawals while it investigated. Switchboard said in its own post that it was investigating a potential compromise of its Move-based implementations — the versions of its software that run on newer blockchains — and halted its network on Aptos, Sui, IOTA and Movement as a precaution.

The Evidence: What Was Actually Lost

• Full Sail — the protocol later said an attacker removed about 91,000 USD from three of its vaults.
• Virtue — a separate stablecoin lending protocol on IOTA reported roughly 455,000 USD in losses and said the backing of its VUSD stablecoin was impaired.
• Scope of the outage — Switchboard halted its network across Aptos, Sui, IOTA and Movement while investigating.
• User protection — Full Sail is disabling deposits, moving pools to withdrawal-only mode, and plans to publish withdrawal and claim instructions within days.

The Core Conflict: Shared Infrastructure Means Shared Risk

The most important lesson here is about invisible dependencies. Most depositors in Full Sail had probably never thought about Switchboard, yet a problem at Switchboard ended the protocol entirely. This mirrors other shared-infrastructure failures in DeFi history, where a single piece of plumbing used by dozens of protocols becomes a single point of failure for all of them at once.

It also raises questions about how newer blockchains handle risk. The suspected compromise affected Switchboard’s Move-based implementations — the software versions written for Move-language chains like Sui, Aptos, IOTA and Movement. Move was designed with security advantages in mind, but a bug in a service built on top of the chain neutralizes those advantages entirely. The chain did not fail; the ecosystem around it did.

Market Implications: Will Users Get Their Money Back?

Full Sail says it will use its remaining protocol-owned liquidity to compensate users, and that the team will cover any shortfall so community depositors are repaid first. That is a notably responsible posture — many exploited protocols simply leave holders with worthless receipts. But promises to repay are easier to make than to keep, and users should watch for the promised withdrawal and claim instructions in the coming days before drawing conclusions.

The incident also comes amid a broader stretch of DeFi security trouble. Just recently, Blockaid reported that the More Markets lending reserve was drained for 9.3 million USD. Security firms have tracked dozens of incidents monthly through 2026, and oracle-related failures — where price feeds are manipulated or compromised — remain one of the most common attack paths against lending and vault protocols.

The Verdict: What This Means for You

If you deposited in Full Sail or Virtue, the immediate steps are practical: stop depositing, wait for official withdrawal instructions from the protocols’ verified X accounts, and be extremely wary of fake “compensation claim” links — scammers routinely impersonate exploited protocols to phish seed phrases from distressed users. Never sign transactions from unsolicited links promising refunds.

For everyone else, treat this as a due-diligence prompt. Before depositing into any DeFi protocol, ask a simple question: which oracle does it use, and what happens if that oracle is wrong or compromised? Protocols that rely on a single price feed with no circuit breakers carry a risk that no audit will fully eliminate. Diversifying across protocols — and across the infrastructure those protocols depend on — is one of the few real defenses a regular investor has.

The cryptocurrency market remains highly volatile. This article is for informational purposes only and does not constitute financial advice.