Thala Labs: Recovery of Stolen $25.5 Million After Attack

user avatar

by Giorgi Kostiuk

2 years ago

On Nov. 15, 2024, Thala Labs, a DeFi protocol on the Aptos blockchain, faced a significant hack. The attack allowed the hacker to withdraw $25.5 million in liquidity pool tokens.

The Attack and Immediate Actions

In response to the attack, Thala's team paused all relevant contracts and froze approximately $11.5 million in related assets, including $9 million in Move Dollars (MOD) and $2.5 million in THL tokens. Thala Labs stated that affected users do not need to take any action, as all positions will be restored to their full value.

We are relieved to announce that affected users require no further action, and their positions will be made 100% whole.Thala Labs

Recovery Process and Negotiation

With the help of Seal 911 and Ogle, two crypto-focused theft recovery organizations, Thala was able to quickly identify the hacker. The hacker willingly contacted them to negotiate the return of the stolen funds, and was offered a $300,000 bounty in exchange. The stolen funds were returned just hours after the exploit.

What is Thala Labs?

Thala Labs offers automated market-making and a yield-bearing stablecoin, Move Dollar (MOD), within the Aptos ecosystem. The protocol recently launched ThalaSwap V2, but the breach was attributed to a vulnerability within the older v1 contracts.

The Thala Labs hack showcases ongoing security challenges in the crypto industry. Despite a decrease in losses compared to earlier in the year, such incidents remain a significant risk for decentralized protocols.

Tier I

Sector: #18291

Sealed Hiding Place Room

Resource Cache

Resource Cache

Tier I

Requires 25% Tier Progress to Claim
Meme Cache

Meme Cache

Tier I

Requires 50% Tier Progress to Claim
Equipment Cache

Equipment Cache

Tier I

Requires 75% Tier Progress to Claim

After collecting, hiding places will be stored in your inventory and can be opened with Keys.

Other news

Ethereum's Glamsterdam Upgrade Scheduled for Hoodi Test Network

Ethereum's next major upgrade, Glamsterdam, is set to activate on the Hoodi test network on October 26, marking a significant step in testing changes to block production and execution costs.

user avatarMiguel Rodriguez

International Crackdown on West African Scam Networks Results in 28 Arrests

An international effort against West African scam networks has led to 28 arrests and the removal of over 37 million accounts linked to fraudulent activity.

user avatarLuis Flores

Stablecoin Payment Transactions Surge Despite Flat Supply

A new report reveals a significant increase in stablecoin payment transactions, contrasting with stagnant supply levels.

user avatarArif Mukhtar

MARA Holdings Transfers 1,000 BTC to Exchanges Amid Market Scrutiny

MARA Holdings has transferred approximately 1,000 BTC to Binance and Gate over the past five days, raising questions about its treasury movements.

user avatarDavid Robinson

CryptoBilis Case Exposes Vulnerabilities in Hardware Wallets

The CryptoBilis case reveals vulnerabilities in hardware wallets, leading to $90 million in losses due to tampered devices.

user avatarMaria Gutierrez

California Reaches $500,000 Settlement with Fidelity Over Crypto Withdrawal Restrictions

California has reached a $500,000 settlement with Fidelity Digital Asset Services regarding restrictions on crypto withdrawals.

user avatarAndrew Smith

Important disclaimer: The information presented on the Dapp.Expert portal is intended solely for informational purposes and does not constitute an investment recommendation or a guide to action in the field of cryptocurrencies. The Dapp.Expert team is not responsible for any potential losses or missed profits associated with the use of materials published on the site. Before making investment decisions in cryptocurrencies, we recommend consulting a qualified financial advisor.