Thala Recovers $25.5M in Stolen User Assets from Hacker

• Thala has recovered millions of dollars in stolen user assets after being hacked. 
• The protocol negotiated with the attacker. 
• Thala’s codebase is still under extensive review. 

Thala announced today that it had successfully recovered millions of dollars in stolen crypto assets, reassuring its users of 100% indemnification. 

Thala, developed by Thala Labs, is a decentralized finance (DeFi) platform built on the Move programming language. It enables users to borrow the Move Dollar and provide liquidity through a rebalancing Automated Market Maker (AMM). The Move Dollar is a decentralized, over-collateralized stablecoin on the Aptos network, backed by U.S. dollar-denominated assets held in separate accounts.

The DeFi project deployed on Ethereum’s Layer 2 blockchain Movement in March, seven months before it was hacked. 

Thala’s Recovery from Hack 

In an X post on Saturday, Thala confirmed that it had suffered a security breach on November 15 due to an isolated vulnerability in the latest update to v1 farming contracts. The exploit allowed the hacker to withdraw $25.5 million in liquidity pool tokens before the platform paused all relevant contracts and froze Thala token assets ($9 million in MOD and $2.5 million in THL). 

According to the post, Thala sought the help of law enforcement, Seal 911, Ogle, and others to identify the attacker and negotiate a $300,000 bounty for the full recovery of stolen user assets. 

“To note, affected users require no further action, and positions will be made 100% whole. However, all relevant contracts and the Thala frontend will remain paused until deemed to be fully secure. Existing positions across CDP and LST modules are unaffected,” the post read. 

Thala clarified that it would issue further updates on the development after reviewing its protocol’s codebase and re-auditing all affected packages. 

Stay updated on how much the crypto industry lost to hacks and scams in October:
Here’s How Much Crypto Lost to Hacks and Scams In October

Read why WazirX users want to sue the hacked exchange:
WazirX Hack Victims Plan Class-Action Lawsuit Against the Exchange