Thala Labs: Recovery of Stolen $25.5 Million After Attack

user avatar

by Giorgi Kostiuk

2 years ago

On Nov. 15, 2024, Thala Labs, a DeFi protocol on the Aptos blockchain, faced a significant hack. The attack allowed the hacker to withdraw $25.5 million in liquidity pool tokens.

The Attack and Immediate Actions

In response to the attack, Thala's team paused all relevant contracts and froze approximately $11.5 million in related assets, including $9 million in Move Dollars (MOD) and $2.5 million in THL tokens. Thala Labs stated that affected users do not need to take any action, as all positions will be restored to their full value.

We are relieved to announce that affected users require no further action, and their positions will be made 100% whole.Thala Labs

Recovery Process and Negotiation

With the help of Seal 911 and Ogle, two crypto-focused theft recovery organizations, Thala was able to quickly identify the hacker. The hacker willingly contacted them to negotiate the return of the stolen funds, and was offered a $300,000 bounty in exchange. The stolen funds were returned just hours after the exploit.

What is Thala Labs?

Thala Labs offers automated market-making and a yield-bearing stablecoin, Move Dollar (MOD), within the Aptos ecosystem. The protocol recently launched ThalaSwap V2, but the breach was attributed to a vulnerability within the older v1 contracts.

The Thala Labs hack showcases ongoing security challenges in the crypto industry. Despite a decrease in losses compared to earlier in the year, such incidents remain a significant risk for decentralized protocols.

Tier I

Sector: #18291

Sealed Hiding Place Room

Resource Cache

Resource Cache

Tier I

Requires 25% Tier Progress to Claim
Meme Cache

Meme Cache

Tier I

Requires 50% Tier Progress to Claim
Equipment Cache

Equipment Cache

Tier I

Requires 75% Tier Progress to Claim

After collecting, hiding places will be stored in your inventory and can be opened with Keys.

Other news

Bitcoin Core Updates Security Disclosure Policy Amid AI Vulnerability Discoveries

Bitcoin Core has updated its security disclosure policy to accelerate the reporting of vulnerabilities discovered through AI tools.

user avatarRajesh Kumar

Bitcoin Core Developers Release Security Updates Following AI Discovery

Bitcoin Core developers have released security updates after an AI-powered code scan revealed three vulnerabilities, including a critical one that could crash nodes on Windows and macOS.

user avatarMiguel Rodriguez

CF Benchmarks Introduces CFB Oracle to Enhance On-Chain Price Integrity

CF Benchmarks has launched CFB Oracle, a service providing cryptographically signed index information for applications on Ethereum mainnet, HyperEVM, and Robinhood Chain.

user avatarLuis Flores

SEC Proposes New Custody Framework for Crypto Assets

The SEC has proposed a new custody framework for investment advisers and registered funds dealing with crypto assets, allowing for potential self-custody and the use of state trust companies as custodians.

user avatarArif Mukhtar

FINMA Approves First Swiss Retail Bitcoin ETF

Switzerland's financial regulator, FINMA, has approved its first retail ETF that invests directly in Bitcoin, allowing retail investors to gain regulated exposure to Bitcoin.

user avatarMaria Gutierrez

EIP7906 Proposal Considered for Enhancing Ethereum Transaction Safety

The Ethereum Foundation is considering EIP7906, which proposes a readonly post-transaction frame to evaluate changes and events before accepting transaction outcomes.

user avatarDavid Robinson

Important disclaimer: The information presented on the Dapp.Expert portal is intended solely for informational purposes and does not constitute an investment recommendation or a guide to action in the field of cryptocurrencies. The Dapp.Expert team is not responsible for any potential losses or missed profits associated with the use of materials published on the site. Before making investment decisions in cryptocurrencies, we recommend consulting a qualified financial advisor.