How a Missing `assert!` Drained $3.44M From Typus Finance — and Why the Code Looked Correct

On October 15, 2025, at 13:05 UTC, an attacker began draining Typus Finance's TLP liquidity pool on the Sui network. Thirty-four minutes later, the contracts were paused — but the pool was already emp