Move Dollar

Radiant

DeFi

Radiant Capital

Thala

Decentralized finance firm Thala has restarted operations a day after the protocol’s liquidity pools were exploited for roughly $25.5 million. 
In a Nov. 17 X <a href="https://x.com/ThalaLabs/status/1858033047666569391" target="_blank" rel="nofollow">post</a>, Thala notified users that all its offerings have been restored, except its staking service, which is being “patched and audited.” 
The announcement comes a day after the protocol <a href="https://x.com/ThalaLabs/status/1857703541089120541" target="_blank" rel="nofollow">disclosed</a> it was the victim of a security breach on Nov. 15, which allowed a bad actor to withdraw large sums of its liquidity tokens. Reportedly, the isolated issue stemmed from the protocol’s v1 farming contracts, where a vulnerability was introduced after a recent update. 
According to Thala, all services were suspended immediately after the breach was flagged, and the protocol managed to freeze $11.5 million worth of Thala-related assets, including the protocol’s native THL token and the Move Dollar (MOD). 
This was possible due to the Move programming language, which underpins the Aptos blockchain on which Thala operates. Move treats digital assets as first-class resources and includes native functions like freeze and burn. 
To recover the remaining funds, Thala worked with <a href="https://crypto.news/defi-white-hats-seal-911-unveil-info-sharing-tool/" target="_blank">SEAL 911</a>, a cohort of DeFi security experts, and Ogle, an on-chain investigator, along with law enforcement to track down the hacker behind the incident. The hacker agreed to return all user assets in exchange for a $300,000 bounty. 
 You might also like: <a rel="" href="https://crypto.news/tapioca-foundation-offers-1m-bounty-to-attacker-after-4-7m-exploit/"> Tapioca Foundation offers $1m bounty to attacker after $4.7m exploit </a> 
Thala has assured users that all positions will be made “100% whole,” and no action is required on their part. 
Presently, the total value locked in Thala has <a href="https://defillama.com/protocol/thala" target="_blank" rel="nofollow">dropped</a> from $234 million to $196 million, while THL was down over 31% since the incident. 
This is one of the many attacks targeted towards decentralized protocols in recent months. On Oct. 16, DeFi lender Radiant Capital was drained of roughly $50 million after attackers exploited a backdoor contract. 
In a September <a href="https://crypto.news/crypto-staking-platform-bedrock-exploited-via-a-bug-users-can-swap-1-eth-for-1-btc/" target="_blank">incident</a>, Bedrock, a staking protocol, lost an estimated $2 million in digital assets due to a bug that allowed cyber thieves to drain funds from the protocol’s liquidity pools. 
According to blockchain security firm <a href="https://crypto.news/peckshield-october-crypto-hacks-tally-up-to-88-4m-in-losses-across-20-incidents/" target="_blank">PeckSheild</a>, around $88.4 million was lost in October via crypto hacks, while total on-chain losses surged to $181 million. 
 Read more: <a rel="" href="https://crypto.news/post-mortem-reveals-stealthy-malware-injection-led-to-50m-radiant-capital-exploit/"> Post-mortem reveals stealthy malware injection led to $50m Radiant Capital exploit </a>

Thala protocol resumes operations after $25.5m exploit

crypto.news

Other articles published on Nov 18, 2024

Goldman Sachs Digital Asset Platform Plans New Split in Next 12 Months

Trump’s Team in Talks with Crypto Leaders for Major Regulatory Shift: Report

Plutus Announces Platform Enhancements to Bolster Transparency and Sustainability

Trump Makes Bold Moves in Crypto Sector

Cardano (ADA) Founder Advances Multi-Pronged Push for US Crypto Regulation

Bitcoin price dips 3% as liquidity hunt follows $4.6B MicroStrategy buy

Join our free newsletter for daily crypto updates!