Sui: The Complete Guide
A clear 2026 guide to Sui: the Move-based layer-1 from Mysten Labs, its object model, parallel execution, SUI token, zkLogin, Walrus storage and risks.
Table of contents
- What is Sui?
- The Sui short answer
- How Sui works
- The object model
- Parallel execution and the fast path
- Consensus: Mysticeti
- Move: the language
- SUI token, fees and economics
- Supply and staking
- The fee model
- The wider Sui stack
- Security, trust and track record
- How to get started (safely)
- Sui vs alternatives
- Risks and what to avoid
- Safety checklist
- Glossary
- Looking ahead
- Related guides
What is Sui?
Sui is a layer-1 (base-layer) blockchain that launched its mainnet in May 2023. It was built by Mysten Labs, a company founded by senior engineers who had led the Diem and Novi wallet projects at Meta (formerly Facebook). When Meta wound Diem down, that team kept the most valuable piece — the Move programming language — and rebuilt around it with a new data model and a new consensus engine.
The headline idea is that Sui does not store the world as one giant shared ledger of account balances. Instead, every asset is a discrete object: a coin, an NFT, a liquidity position, and even a whole market are each their own object with a unique ID, a type, and an explicit owner. Because the network knows exactly which objects a transaction touches, it can run unrelated transactions at the same time instead of forcing them into a single queue.
The Sui short answer
Sui is a fast, Move-based layer-1 that treats assets as owned objects rather than ledger entries. That object model enables true parallel execution, sub-second finality via its Mysticeti consensus, and fees that are typically a fraction of a cent. It has a rich DeFi and storage ecosystem (DeepBook, Walrus), seedless onboarding through zkLogin, and a 10 billion capped SUI token. The honest caveats: it is young, most of the supply is still unlocking, it has had outages, and a 2025 app-level hack exposed how much power validators actually hold.
How Sui works
The object model
On most chains, "owning" a token means a smart contract has a row in its internal table that says your address holds a balance. On Sui, you literally own the object. A USDC balance is a Coin object sitting at your address like a file in a folder; an NFT is an object; a lending position is an object. Objects come in a few flavors that matter a lot for performance:
- Owned objects have a single owner and can be changed only by that owner.
- Shared objects can be read and written by anyone (an order book or an AMM pool is shared).
- Immutable objects can never change (published packages, some config).
Parallel execution and the fast path
The object model is what makes Sui's parallelism real rather than marketing. Because a transaction must declare the objects it uses, the network can check whether two transactions overlap. If they touch different objects, they are independent and execute simultaneously across many CPU cores.
There is a second, subtler win. A transaction that only touches owned objects — for example, sending coins from your wallet to a friend — has no possible conflict with anyone else. Sui can finalize these through a lightweight, consensus-bypassing "fast path" (historically called Byzantine Consistent Broadcast), so a simple transfer can confirm in a few hundred milliseconds without waiting for full ordering. Transactions that touch shared objects (most DeFi) do need total ordering and go through consensus.
Consensus: Mysticeti
Shared-object transactions are ordered by Mysticeti, a DAG-based (directed acyclic graph) consensus protocol that replaced Sui's earlier Narwhal/Bullshark stack on mainnet in mid-2024. Mysticeti targets certified finality in well under half a second under normal load, and in practice the network sustains hundreds to low thousands of real transactions per second. Peak lab benchmarks are far higher, but treat those as ceilings, not everyday throughput.
Move: the language
Contracts are written in Move, a resource-oriented language designed for digital assets. Its core safety property is that assets are typed resources that cannot be copied, silently dropped, or double-spent by the type system itself. This closes an entire class of bugs common in Solidity. Sui uses its own dialect (sometimes called Sui Move) tuned for the object model. Important nuance: Move protects the language layer, but it does not protect against flawed application math — as the Cetus hack later proved.
SUI token, fees and economics
Supply and staking
SUI has a hard maximum supply of 10 billion tokens. As of mid-2026 roughly 40 percent was in circulation, with the rest unlocking on a schedule that stretches into 2030 across contributor, investor, and community-reserve tranches. That means real, ongoing supply expansion — a headwind worth pricing in.
SUI has three core jobs:
- Gas — every transaction pays fees in SUI.
- Staking — holders delegate SUI to validators to secure the network and earn a yield that has sat in the mid-single-digit percent range, minus validator commission.
- Governance — SUI is used to vote on protocol matters, including, controversially, on-chain emergency actions.
The fee model
Fees split into two parts, both denominated in SUI:
| Fee component | What it pays for | Rough cost |
|---|---|---|
| Computation | Executing the transaction | Fraction of a cent under normal load |
| Storage | Holding object data over time | Paid up front, mostly refundable |
Computation uses a reference gas price that validators set each epoch, which keeps everyday fees low and predictable rather than auction-driven. The clever part is the storage fund: you pay to store an object up front, and when you delete it you get back around 99 percent of that storage fee as a rebate in SUI. This gives users an incentive to clean up state instead of bloating the chain forever.
The wider Sui stack
- zkLogin — lets users create and control a Sui address using an ordinary OAuth login (Google, Apple, Twitch, Facebook, Slack) with no seed phrase. Under the hood it derives the address from the login identity plus a secret salt and proves the login with a zero-knowledge proof, so on-chain activity cannot be linked back to the Web2 account. It effectively works as two-factor auth: an attacker needs both your OAuth session and the salt.
- Walrus — a decentralized storage network (mainnet March 2025) for large "blobs" like media and datasets, with its own WAL token. In its first year it crossed several hundred terabytes of stored data, making it one of the larger decentralized storage protocols. Storage on Walrus is programmable from Sui contracts.
- DeepBook — Sui's native central limit order book (CLOB), a fully on-chain matching engine that other apps plug into for liquidity. Its DEEP token pays trading fees; paying in DEEP is cheaper than paying in the traded asset, and staking DEEP unlocks maker/taker discounts that can push fees down to roughly 0.25 basis points on stable pairs and 2.5 basis points on volatile pairs. DeepBook Margin — isolated-margin pools with up to 10x leverage and real-time liquidation — went live on mainnet in early 2026.
- Stablecoins and payments — native USDC, plus USDsui, a Sui-native dollar stablecoin issued through Stripe's Bridge subsidiary that went live in March 2026, drove very large stablecoin transfer volumes into 2026, aided by gas-free stablecoin transfers that launched that year.
Security, trust and track record
This is where an honest guide has to slow down. Sui is well-audited at the core and well-capitalized, but 2025 was a hard year for the ecosystem.
The Cetus hack (May 2025). Cetus, a major Sui DEX, was drained of roughly 223 million dollars in under 15 minutes. The root cause was not a Sui or Move flaw but a rounding/overflow bug in a third-party math library (integer-mate) that a checked_shlw bounds check failed to catch. About 60 million dollars was bridged out to Ethereum; the remaining ~162 million sat on Sui.
The validator freeze — and the controversy. Sui validators coordinated to blacklist the attacker's addresses, freezing the funds still on Sui. A later on-chain vote by validators and stakers approved returning the money, backed partly by a Sui Foundation loan. Supporters called it a decisive rescue. Critics called it exactly the centralization risk that DAO-fork skeptics warned about: if a quorum of validators can freeze and reassign funds, "immutable" has an asterisk. Both readings are fair, and you should weigh them yourself.
Reliability. Sui has also suffered multi-hour mainnet halts — roughly five hours in January 2025, a six-hour stall in January 2026, and a cluster of upgrade-triggered outages in May 2026 — during which the chain stopped processing transactions even though no funds were lost. On the exploit side, the Cetus drain alone topped 200 million dollars in a single year. A young, high-performance runtime carries more operational risk than older, slower chains.
Governance and legitimacy. SUI trades on essentially every major exchange, futures listed on regulated venues, and staking products expanded in 2026. That maturity is real — but it does not undo the concentration concerns above.
How to get started (safely)
- Buy SUI on a reputable centralized exchange, or bridge assets over. See our roundup of the best centralized exchanges.
- Pick a wallet. Use Slush (the official Sui wallet) or another audited Sui wallet. For long-term holdings, use a hardware wallet that supports Sui. Compare options in the best crypto wallets and best hardware wallets guides.
- Or try zkLogin if you want to onboard with a Google or Apple login and no seed phrase — good for small amounts and testing.
- Fund gas. Keep a little SUI for fees; they are tiny but non-zero.
- Start small on apps. Try a modest swap on DeepBook or an established DEX before committing real size.
- Verify everything. Confirm official contract and token addresses from the project's own site, and be skeptical of unaudited high-yield farms.
- Stake if you hold. Delegating SUI to a reputable validator earns yield while helping secure the network.
Sui vs alternatives
| Feature | Sui | Solana | Aptos |
|---|---|---|---|
| Language | Move (object model) | Rust (accounts) | Move (accounts) |
| Parallelism | Object-based, native | Sealevel runtime | Block-STM |
| Simple transfers | Can skip consensus | Full consensus | Full consensus |
| Finality | Sub-second | Sub-second | ~1 second |
| Heritage | Ex-Meta Diem team | Solana Labs | Ex-Meta Diem team |
| Maturity | Young (2023) | Older, more tested | Young (2022) |
Solana is the throughput incumbent with the deepest app ecosystem but a history of its own outages. Aptos shares Sui's Move roots but keeps an account-centric design and Block-STM parallelism rather than Sui's owned-object fast path. Sui's differentiator is the object model and the consensus-bypass for owned objects; the cost is a newer runtime and a smaller (if fast-growing) app base. For a broader landscape view, see the best layer-1 blockchains.
Risks and what to avoid
- App-layer exploits. The base chain being sound does not make every DeFi app on it sound — Cetus proved a library bug can cost hundreds of millions.
- Validator power. Emergency freezes are possible, which cuts against pure immutability. Understand this before assuming funds are uncensorable.
- Supply unlocks. With most of the 10 billion cap still vesting through 2030, expect ongoing sell pressure.
- Outage risk. High-performance young chains can halt; do not assume 100 percent uptime.
- Concentration. Early holders and the foundation retain significant influence over both tokens and governance.
Safety checklist
- Use a hardware wallet for meaningful balances.
- Verify token and contract addresses from official sources only.
- Prefer audited, established apps over anonymous yield farms.
- Keep only what you actively use in hot or zkLogin wallets.
- Track upcoming SUI unlocks so you are not surprised by supply.
- Never sign a transaction whose objects or effects you do not understand.
Glossary
- Object — a discrete on-chain item (coin, NFT, position) with a unique ID, type, and owner; Sui's core unit of state.
- Owned object — an object with a single owner that only that owner can mutate; enables the consensus-bypass fast path.
- Shared object — an object anyone can access (e.g. an AMM pool), requiring full consensus ordering.
- Move — the resource-oriented smart-contract language Sui inherited from Meta's Diem project.
- Mysticeti — Sui's DAG-based consensus protocol delivering sub-second finality.
- Fast path — the lightweight settlement route for owned-object transactions that skips full consensus.
- zkLogin — seedless onboarding that ties a Sui address to an OAuth login plus a secret salt, proven with a zero-knowledge proof.
- Walrus — Sui's decentralized blob-storage network, with the WAL token.
- DeepBook — Sui's native on-chain central limit order book; the DEEP token pays its fees.
- Storage fund / rebate — the mechanism that refunds around 99 percent of prepaid storage fees when an object is deleted.
- Reference gas price — the validator-set base gas price that keeps everyday fees low and predictable.
- Epoch — Sui's ~24-hour period over which the validator set and gas price are fixed.
Looking ahead
Sui enters the back half of the 2020s as one of the more technically distinctive layer-1s: an object model that makes parallelism real, seedless onboarding through zkLogin, and a maturing stack of native infrastructure in Walrus, DeepBook, and stablecoin rails. The 2026 roadmap points toward native private transactions, a stronger Ethereum bridge, and a push at AI-agent and payments use cases. The open questions are the ones this guide keeps returning to — whether the network can shed its outage history, whether app-layer security tightens after Cetus, and whether validators use their power sparingly. If those hold, the architecture is genuinely differentiated; if they do not, the speed will not matter much. To place Sui in context, compare the best layer-1 blockchains, the venues in our best centralized exchanges roundup, and storage options for your keys in the best hardware wallets guide.
Related guides
Frequently asked questions
What is Sui in simple terms?
Sui is a layer-1 blockchain built by Mysten Labs, a team of former Meta engineers who worked on the shuttered Diem project. It uses the Move programming language and an object-centric data model, where every coin, NFT or position is a distinct on-chain object with an owner. That design lets independent transactions run in parallel, which is Sui's main pitch for speed and low fees.
Is Sui safe and legitimate?
Sui is a genuine, well-funded network with billions in value locked and audited core code. But "legitimate" is not the same as "risk-free." In May 2025 the Cetus DEX on Sui was drained of roughly 223 million dollars, and validators controversially froze the attacker's funds, reviving the centralization debate seen in Ethereum's 2016 DAO fork. The base chain has also suffered outages. Treat it as promising but young.
How much are Sui transaction fees?
Sui splits fees into a computation charge and a storage charge, both paid in SUI. A typical transfer or swap costs a small fraction of a cent under normal load, thanks to a validator-set reference gas price. Storage fees are paid up front and around 99 percent is rebated when you delete an object, so reclaiming state actually returns SUI to you.
What is the SUI token used for?
SUI has a fixed maximum supply of 10 billion tokens. It pays gas, is staked to validators to secure the network for a mid-single-digit annual yield, and is used for on-chain governance votes. Roughly 40 percent circulated in mid-2026, with the remainder unlocking on a schedule that runs into 2030, so ongoing supply inflation is a real consideration.
How is Sui different from Solana or Aptos?
All three chase high throughput, but the approach differs. Solana uses a single global state and a leader-based pipeline. Sui and Aptos both descend from Meta's Move language, but Sui's object model lets simple owned-object transfers skip full consensus entirely, while Aptos keeps a more account-based Block-STM design. Sui optimizes for parallelism at the object level; the tradeoff is a newer, less battle-tested runtime.
How do I start using Sui safely?
Buy SUI on a major exchange, then move it to a self-custody wallet such as Slush (the official Sui wallet) or a hardware wallet that supports Sui. You can also try zkLogin wallets that onboard with a Google or Apple login and no seed phrase. Start with a small amount, verify contract addresses, and prefer established apps over unaudited yield farms.