Move Dollar

Radiant

April

Thala

Decentralized finance firm Thala Labs recovered $25.5 million of liquidity pool tokens stolen from one of its farming contracts after the hacker was tracked down by law enforcement and crypto sleuths.
In a post on Nov. 16, Thala <a data-ct-non-breakable="null" href="https://x.com/ThalaLabs/status/1857703541089120541" rel="null" target="null" text="null" title="https://x.com/ThalaLabs/status/1857703541089120541">revealed</a> it had suffered a “security breach” on Nov. 15 due to an “isolated vulnerability” related to its v1 farming contracts, which allowed the hacker to withdraw liquidity tokens.
Thala said it immediately paused all relevant contracts and froze $11.5 million worth of Thala-related assets and was able to identify the hacker. “With the help of law enforcement, Seal 911, Ogle, and others, we were able to quickly identify the exploiter,” Thala said. 
The hacker handed the funds back six hours after the incident, crypto sleuth Ogle <a data-ct-non-breakable="null" href="https://x.com/cryptogle/status/1857779912284762478" rel="null" target="null" text="null" title="null">said</a>. Thala said it negotiated a $300,000 bounty with the hacker in exchange for the full return of user assets. Details of the attacker’s identity weren’t disclosed.
Thala stressed that “affected users require no further action, and positions will be made 100% whole.”
<figure>
 <img alt="Hackers, Police, Cybersecurity" src="https://s3.cointelegraph.com/uploads/2024-11/01933ce0-06b4-7485-babf-c95f46624c3f" title="">
 <figcaption style="text-align: center;">
 Source: <a data-ct-non-breakable="null" href="https://x.com/ThalaLabs/status/1857703541089120541" rel="null" target="null" text="null" title="https://x.com/ThalaLabs/status/1857703541089120541">Thala Labs</a>
 </figcaption>
</figure>
<a data-ct-non-breakable="null" href="https://x.com/ThalaLabs/status/1858033047666569391" rel="null" target="null" text="null" title="null">Access</a> to Thala’s front end is live again. However, farming is still paused and users are unable to stake and unstake positions until Thala conducts an “extensive review” and re-audit of the protocol’s codebase. “It’s inevitable some security issues may happen in the future on Move, but why we’re all building here is for these to occur at a far far less frequency and severity and trend to 0 over time as adjacent tooling gets stronger,” Thala’s CEO Adam Cader <a data-ct-non-breakable="null" href="https://x.com/adammoves_/status/1857858908670279848" rel="null" target="null" text="null" title="https://x.com/adammoves_/status/1857858908670279848">noted</a> in a Nov. 16 X post. 
Thala is one of the most prominent <a data-ct-non-breakable="null" href="https://cointelegraph.com/learn/articles/defi-a-comprehensive-guide-to-decentralized-finance" rel="null" target="null" text="null" title="null">DeFi platforms</a> on the <a data-ct-non-breakable="null" href="https://cointelegraph.com/explained/aptos-blockchain-explained-technology-use-cases-and-prospects" rel="null" target="null" text="null" title="null">Aptos layer-1 blockchain.&nbsp;</a>
The THL token has tanked about 35% to $0.51 since the incident occurred, <a data-ct-non-breakable="null" href="https://www.coingecko.com/en/coins/thala" rel="null" target="null" text="null" title="null">according</a> to CoinGecko.
About $2.5 million worth of THL tokens were stolen in the exploit, while another $9 million came from Thala’s Move Dollar (MOD) stablecoin.
Related: <a data-ct-non-breakable="null" href="https://cointelegraph.com/news/m2-crypto-exchange-hacked-13-m-funds-restored" rel="null" target="null" text="null" title="null">M2 crypto exchange hacked for $13M, user funds already restored</a>
Meanwhile, the <a data-ct-non-breakable="null" href="https://cointelegraph.com/explained/what-is-total-value-locked-tvl-in-crypto-and-why-does-it-matter" rel="null" target="null" text="null" title="null">total value locked</a> on Thala fell from $240 million on Nov. 15 to $195.6 million at the time of writing, DefiLlama data shows.
<figure>
 <img alt="Hackers, Police, Cybersecurity" src="https://s3.cointelegraph.com/uploads/2024-11/01933cdf-5d8c-7b8a-8eea-4f6da4e294e4" title="">
 <figcaption style="text-align: center;">
 Thala protocol’s change in TVL since April 2023. Source: <a data-ct-non-breakable="null" href="https://defillama.com/protocol/thala" rel="null" target="null" text="null" title="https://defillama.com/protocol/thala">DefiLlama</a>
 </figcaption>
</figure>
Almost <a data-ct-non-breakable="null" href="https://cointelegraph.com/news/crypto-hacks-exploits-losses-october-2024" rel="null" target="null" text="null" title="null">$130 million was snatched from victims</a> in October, with the bulk coming from exploits, blockchain security firm CertiK reported.
The biggest incident in October involved lending protocol Radiant Capital, which lost about $54 million.
About <a data-ct-non-breakable="null" href="https://cointelegraph.com/news/hackers-got-away-with-440m-in-28-exploits-in-q3-report" rel="null" target="null" text="null" title="null">$460 million was stolen</a> by hackers across 28 incidents in the preceding three months in Q3 2024, according to cybersecurity company Hacken.&nbsp;
Magazine: <a data-ct-non-breakable="null" href="https://cointelegraph.com/magazine/hackers-crypto-wallets-recover-savings/" rel="null" target="null" text="null" title="null">Meet the hackers who can help get your crypto life savings back</a>

Thala recovers $25.5M in crypto lost through v1 farming vulnerability

Cointelegraph

Other articles published on Nov 18, 2024

Goldman Sachs Digital Asset Platform Plans New Split in Next 12 Months

Trump’s Ally RFK Jr. Bets Everything On Bitcoin, Find Out Why

Top 5 Gainers of the Week (November 11-18): BAN, SHOGGOTH, MIGGLES, PNUT, SOLO

Benjamin Cowen Predicts Cardano’s Decline Against Bitcoin by Year-End

Gold Prices Surge as Goldman Sachs Expands Crypto

Analyst Projects $6 for Cardano (ADA). Here’s the Timeline

Join our free newsletter for daily crypto updates!