Thala, a DeFi project operating within the Aptos ecosystem, has announced a successful resolution following a recent security breach that resulted in the theft of $25 million worth of assets.
The project confirmed that it had negotiated with the attacker and accepted a $300,000 bounty in exchange for the full recovery of user assets.
The attack occurred due to a vulnerability in Thala’s V1 liquidity pool contract, which attackers used to siphon user funds. In response, Thala immediately suspended all related contracts and froze token assets, including $9 million in MOD and $2.5 million in THL, to mitigate further risk.
With the cooperation of security forces, cybersecurity firms such as Seal 911 and Ogle, and other partners, Thala was able to identify the attacker and initiate negotiations.
Thala assured his community that there is no need for any action from affected users as all affected positions will be restored 100%. However, the platform’s contracts and frontend will remain suspended until comprehensive security audits confirm their security.
The team said:
“Our top priority is the security of user assets and the restoration of trust in our platform. We will ensure that all necessary precautions are taken before resuming operations.”
*This is not investment advice.