Thala Labs: Recovery of Stolen $25.5 Million After Attack

user avatar

by Giorgi Kostiuk

2 years ago

On Nov. 15, 2024, Thala Labs, a DeFi protocol on the Aptos blockchain, faced a significant hack. The attack allowed the hacker to withdraw $25.5 million in liquidity pool tokens.

The Attack and Immediate Actions

In response to the attack, Thala's team paused all relevant contracts and froze approximately $11.5 million in related assets, including $9 million in Move Dollars (MOD) and $2.5 million in THL tokens. Thala Labs stated that affected users do not need to take any action, as all positions will be restored to their full value.

We are relieved to announce that affected users require no further action, and their positions will be made 100% whole.Thala Labs

Recovery Process and Negotiation

With the help of Seal 911 and Ogle, two crypto-focused theft recovery organizations, Thala was able to quickly identify the hacker. The hacker willingly contacted them to negotiate the return of the stolen funds, and was offered a $300,000 bounty in exchange. The stolen funds were returned just hours after the exploit.

What is Thala Labs?

Thala Labs offers automated market-making and a yield-bearing stablecoin, Move Dollar (MOD), within the Aptos ecosystem. The protocol recently launched ThalaSwap V2, but the breach was attributed to a vulnerability within the older v1 contracts.

The Thala Labs hack showcases ongoing security challenges in the crypto industry. Despite a decrease in losses compared to earlier in the year, such incidents remain a significant risk for decentralized protocols.

Tier I

Sector: #18291

Sealed Hiding Place Room

Resource Cache

Resource Cache

Tier I

Requires 25% Tier Progress to Claim
Meme Cache

Meme Cache

Tier I

Requires 50% Tier Progress to Claim
Equipment Cache

Equipment Cache

Tier I

Requires 75% Tier Progress to Claim

After collecting, hiding places will be stored in your inventory and can be opened with Keys.

Other news

World Launches New Banking and Finance Services

World has introduced its banking and finance services focusing on human verification and credentialing.

user avatarMiguel Rodriguez

UNDP and Blockchain for Good Alliance Launch Cybersecurity Programme

On October 19, the UNDP and the Blockchain for Good Alliance announced a two-year cybersecurity programme aimed at enhancing blockchain adoption in public institutions.

user avatarLuis Flores

Andreessen Horowitz Expands Crypto Investment Scope with A16z Frontier

Andreessen Horowitz has rebranded its crypto investment fund to A16z Frontier, allowing for a broader investment scope in emerging technologies.

user avatarArif Mukhtar

Robinhood Secures DFSA Authorization and Plans Dubai Expansion

Robinhood has announced its DFSA authorization and plans to establish a headquarters in the Dubai International Financial Centre, with a rollout in the Middle East set for 2027.

user avatarMaria Gutierrez

Circle Updates Institutional USDC Service Details

Circle provides an update on its service for connecting institutional USDC flows, highlighting the complexities of minting and liquidity management.

user avatarDavid Robinson

Grayscale's Research Note Explores Crypto and AI Integration

Grayscale's October 23 research note discusses the intersection of cryptocurrency and AI, highlighting various business models and their implications.

user avatarAndrew Smith

Important disclaimer: The information presented on the Dapp.Expert portal is intended solely for informational purposes and does not constitute an investment recommendation or a guide to action in the field of cryptocurrencies. The Dapp.Expert team is not responsible for any potential losses or missed profits associated with the use of materials published on the site. Before making investment decisions in cryptocurrencies, we recommend consulting a qualified financial advisor.