Thala recovers $25.5M in crypto caused by v1 farming vulnerability

As a seasoned crypto investor with a knack for navigating the tumultuous seas of digital finance, I must say that the swift recovery of funds by Thala Labs is a breath of fresh air in this often unpredictable market. The rapid identification and apprehension of the hacker involved, coupled with the return of the stolen assets within mere hours, is a testament to the power of community collaboration and law enforcement in the crypto sphere.


Thala Labs, a company specializing in decentralized finance, managed to retrieve $25.5 million worth of liquidity pool tokens that were stolen from one of their farming contracts. This recovery came swiftly following the identification of the culprit by both law enforcement agencies and crypto detectives.

On November 16, Thala disclosed that there was a “security incident” on November 15, stemming from a specific weakness in its v1 farming contract, which enabled a hacker to take away liquidity tokens.

In response, Thala swiftly halted all pertinent agreements and secured approximately $11.5 million in Thala-associated assets. Moreover, they successfully traced the culprit behind the incident with remarkable speed.

Thala stated that by collaborating with law enforcement agencies such as Seal 911, Ogle, and others, we swiftly pinpointed the individual who was taking advantage of the situation.

Six hours following the cyberattack, it was reported that the hacker returned the funds, as stated by crypto investigator Ogle. Meanwhile, Thala shared that a $300,000 reward was given for the complete restoration of user assets. The attacker’s identity remained undisclosed in this case.

Thala emphasized that “users who have been impacted don’t need to take any additional steps, as we will fully restore their positions.

Thala’s user interface is functioning once more; however, for now, farming activities remain halted. Users cannot currently engage in staking or unstaking operations as Thala performs a thorough examination and re-evaluation of their underlying codebase.

The assault saw Thala connecting with Move, a decentralized network of interconnected blockchains created by Movement Labs, as mentioned by Adam Cader in a recent blog post on November 16th.

“It’s inevitable some security issues may happen in the future on Move, but why we’re all building here is for these to occur at a far far less frequency and severity and trend to 0 over time as adjacent tooling gets stronger.”

Thala is one of the most prominent DeFi platforms on the Aptos layer-1 blockchain. 

The THL token has tanked about 35% to $0.51 since the incident occurred, according to CoinGecko.

2.5 million dollars’ worth of THL tokens were swiped during the hacking incident, and an additional 9 million dollars was taken from Thala’s Stablecoin called Move Dollar (MOD).

Currently, the amount locked in Thala has decreased from approximately $240 million on November 15 to around $195.6 million, as per DefiLlama’s latest data.

Approximately $130 million were stolen from victims in October, mostly through exploits, as reported by blockchain security company CertiK.

As a researcher, I experienced a significant event in October that centered around the lending protocol, Radiant Capital. Unfortunately, this platform suffered a loss of approximately $54 million.

In the third quarter of 2024, a total of approximately $460 million was illegally obtained by hackers through 28 separate incidents, as reported by the cybersecurity firm Hacken.

Read More

2024-11-18 04:54