On November 16th, Aptos ecological DeFi project Thala released a latest announcement stating that due to a security vulnerability in the latest V1 liquidity pool contract, assets worth $25 million were stolen.
Currently, Thala has suspended all related contracts and frozen Thala token assets ($9 million in MOD and $2.5 million in THL). With the assistance of other institutions, Thala has reached an agreement with the attacker and recovered all user assets through a $300,000 bounty.
Affected users do not need to take further action, and their positions will be fully restored to 100%. However, all related contracts and Thala front-end will remain suspended until considered fully secure.