AftermathFi’s Perpetuals V2 launches on mainnet after 12-week security review clears all major issues

AftermathFi is bringing its Perpetuals V2 to mainnet on August 18, and for once, the security story behind a DeFi launch is actually worth reading. Blockchain security firm OtterSec spent 12 weeks combing through nine separate repositories of the protocol’s smart contracts and came up empty on critical and high-severity issues, a result that matters considerably more given what happened the last time AftermathFi ran a perpetuals product in production.

The Sui-based decentralized exchange announced the audit completion on August 14, leaving a narrow four-day window before the live launch.

What the audit actually covered

Twelve weeks is a long runway for a smart contract review. OtterSec is not a new name in this space. The firm has a track record of securing protocols with over $36B in total value locked and has patched vulnerabilities cumulatively exceeding $1B across its client base. It had previously reviewed components of AftermathFi’s infrastructure, including the Perps Oracle, in late 2025, so the team was not coming in cold.

The shadow of the April exploit

On April 29, 2026, AftermathFi suffered an exploit that drained approximately $1.14M USDC from its original Perpetuals module. The mechanism was a negative integrator fee validation flaw, a bug that let attackers inflate collateral balances and then withdraw funds that were not legitimately theirs. The team paused all operations and began an investigation.

That incident is the direct reason Perpetuals V2 exists. The protocol did not patch and resume; it rebuilt, subjected the new architecture to a substantially longer and broader audit than is typical, and is now launching with a clean bill of health from an established security firm.

What this means for AftermathFi and the Sui ecosystem

OtterSec’s continued involvement with AftermathFi infrastructure, stretching back to the Perps Oracle review in late 2025, adds a layer of institutional continuity to the security narrative. The four days between the audit announcement and the mainnet date give the market very little time to react before the product is live.

Disclosure: This article was edited by Editorial Team. For more information on how we create and review content, see our Editorial Policy.