Thala, a DeFi project in the Aptos ecosystem, posted on X that access to the Swap, CDP, and LST modules is now online and fully functional. If you have any questions, please join the official community Discord for feedback.
Earlier, Thala issued a latest announcement stating that the latest V1 liquidity pool contract was attacked by a security vulnerability, resulting in the theft of assets worth $25 million. At present, Thala has suspended all related contracts and frozen Thala token assets ($9 million MOD and $2.5 million THL). With the assistance of other institutions, it has agreed with the attacker to restore all user assets through a $300,000 bounty.
It should be noted that affected users do not need to take further action and their positions will be 100% restored. However, all related contracts and the Thala front end will remain suspended until they are deemed completely safe. Existing positions in the CDP and LST modules are not affected. At present, the code base of the protocol is undergoing extensive review and re-examination of all affected and related packages.