Thala Labs: Recovery of Stolen $25.5 Million After Attack

by Giorgi Kostiuk

2 years ago

On Nov. 15, 2024, Thala Labs, a DeFi protocol on the Aptos blockchain, faced a significant hack. The attack allowed the hacker to withdraw $25.5 million in liquidity pool tokens.

The Attack and Immediate Actions

In response to the attack, Thala's team paused all relevant contracts and froze approximately $11.5 million in related assets, including $9 million in Move Dollars (MOD) and $2.5 million in THL tokens. Thala Labs stated that affected users do not need to take any action, as all positions will be restored to their full value.

We are relieved to announce that affected users require no further action, and their positions will be made 100% whole.Thala Labs

Recovery Process and Negotiation

With the help of Seal 911 and Ogle, two crypto-focused theft recovery organizations, Thala was able to quickly identify the hacker. The hacker willingly contacted them to negotiate the return of the stolen funds, and was offered a $300,000 bounty in exchange. The stolen funds were returned just hours after the exploit.

What is Thala Labs?

Thala Labs offers automated market-making and a yield-bearing stablecoin, Move Dollar (MOD), within the Aptos ecosystem. The protocol recently launched ThalaSwap V2, but the breach was attributed to a vulnerability within the older v1 contracts.

The Thala Labs hack showcases ongoing security challenges in the crypto industry. Despite a decrease in losses compared to earlier in the year, such incidents remain a significant risk for decentralized protocols.

Tier I

Sector: #18291

Sealed Hiding Place Room

Resource Cache

Tier I

Requires 25% Tier Progress to Claim

Meme Cache

Tier I

Requires 50% Tier Progress to Claim

Equipment Cache

Tier I

Requires 75% Tier Progress to Claim

After collecting, hiding places will be stored in your inventory and can be opened with Keys.

Tier I

Sector: #18291

25%

50%

75%

100%

Tier II

Survivors rescued:

0 / 600

Survivors

0/0

Transmit Signal

Broadcast this sector's coordinates to other rescuers.

Other news

Optimism Releases Required Batcher Update v1170

Optimism has announced the release of opbatcher v1170, which is mandatory for operators using the batching infrastructure for OP Stack chains.

Andrew Smith15 hours ago

NEAR Developers Release First Candidate for nearcore 2140

The NEAR developers have published the first release candidate for nearcore 2140, introducing significant protocol and database changes.

Jacob Williams15 hours ago

Lido Completes Winddown of Regular Simple DVT Clusters

Lido has successfully completed the winddown of its regular Simple DVT clusters, marking a significant step in the decentralization of its validator operations.