Thala Labs: Recovery of Stolen $25.5 Million After Attack

user avatar

by Giorgi Kostiuk

2 years ago

On Nov. 15, 2024, Thala Labs, a DeFi protocol on the Aptos blockchain, faced a significant hack. The attack allowed the hacker to withdraw $25.5 million in liquidity pool tokens.

The Attack and Immediate Actions

In response to the attack, Thala's team paused all relevant contracts and froze approximately $11.5 million in related assets, including $9 million in Move Dollars (MOD) and $2.5 million in THL tokens. Thala Labs stated that affected users do not need to take any action, as all positions will be restored to their full value.

We are relieved to announce that affected users require no further action, and their positions will be made 100% whole.Thala Labs

Recovery Process and Negotiation

With the help of Seal 911 and Ogle, two crypto-focused theft recovery organizations, Thala was able to quickly identify the hacker. The hacker willingly contacted them to negotiate the return of the stolen funds, and was offered a $300,000 bounty in exchange. The stolen funds were returned just hours after the exploit.

What is Thala Labs?

Thala Labs offers automated market-making and a yield-bearing stablecoin, Move Dollar (MOD), within the Aptos ecosystem. The protocol recently launched ThalaSwap V2, but the breach was attributed to a vulnerability within the older v1 contracts.

The Thala Labs hack showcases ongoing security challenges in the crypto industry. Despite a decrease in losses compared to earlier in the year, such incidents remain a significant risk for decentralized protocols.

Tier I

Sector: #18291

Sealed Hiding Place Room

Resource Cache

Resource Cache

Tier I

Requires 25% Tier Progress to Claim
Meme Cache

Meme Cache

Tier I

Requires 50% Tier Progress to Claim
Equipment Cache

Equipment Cache

Tier I

Requires 75% Tier Progress to Claim

After collecting, hiding places will be stored in your inventory and can be opened with Keys.

Other news

Hong Kong Launches Postquantum Cryptography Toolkit

On November 2, the Hong Kong Monetary Authority and the Hong Kong University of Science and Technology launched a postquantum cryptography assessment toolkit to help banks identify necessary upgrades to their cryptographic systems as quantum computing evolves.

user avatarMaria Fernandez

NYSE Partners with Major Firms for Tokenized Securities Initiative

On November 2, the New York Stock Exchange announced partnerships with Broadridge, Computershare, Equiniti, and Superstate to support a proposed tokenized securities venue aimed at enhancing infrastructure and improving market operations.

user avatarGustavo Mendoza

BTCPay Servers 247 Release Addresses Security Vulnerabilities

The latest release of BTCPay Servers, version 247, includes critical security fixes to enhance security for businesses operating their own Bitcoin payment servers.

user avatarRajesh Kumar

Aave Freezes tBTC Supply and Borrowing Amid Threshold's Pause

Aave contributors announced a freeze on additional tBTC supply and borrowing in its Ethereum Core market following Threshold's temporary pause of the token's mint and redeem functions.

user avatarMiguel Rodriguez

BitMine Immersion Technologies Reports Significant ETH Holdings

BitMine Immersion Technologies disclosed its holdings of 6,060,506 ETH as of November 1, with a significant portion staked.

user avatarLuis Flores

CrowdStrike Introduces AI Agent Kill Switch to Enhance Corporate Security

CrowdStrike has introduced an AI agent kill switch to enhance security in corporate networks, allowing administrators to stop unauthorized AI activities.

user avatarArif Mukhtar

Important disclaimer: The information presented on the Dapp.Expert portal is intended solely for informational purposes and does not constitute an investment recommendation or a guide to action in the field of cryptocurrencies. The Dapp.Expert team is not responsible for any potential losses or missed profits associated with the use of materials published on the site. Before making investment decisions in cryptocurrencies, we recommend consulting a qualified financial advisor.