Hack history / 2024 / Hack or exploit
ThalaSwap
Hack or exploit on Nov 15, 2024 · Missing Input Validation
SOURCES AGREE ON DATE AND LOSS · 3 SOURCES
Lost
$25.5M
dollars at the time
Returned
$25.2M
99% of the loss, as a source states it
Rank
#177
among thefts by dollars lost
What happened
On November 15, 2024, an attacker exploited missing balance validation in Thala's v1 farming contracts to unstake $25.5M in LP tokens without owning them. Thala recovered $25M within 6 hours through white-hat negotiation.
Details
- Date
- Nov 15, 2024
- Kind
- Hack or exploit
- Method
- Missing Input Validation
- How in
- Smart contract bug
- Target
- DeFi protocol
- Chains
- Aptos
After the theft
- Recovered or seized
- $25M
“Thala recovered $25M within 6 hours through white-hat negotiation.” (DefiLlama) - Frozen
- $9M
“Thala has since paused all related contracts and frozen Thala token assets ($9m MOD and $2.5m THL).” (SlowMist Hacked) - Recovered or frozen
- $25.2M
“$25.5M taken, $300K after recovery or freezing” (Web3 Is Going Great)
Related incidents
Hedgey 2024 · Hack or exploit · $44.7M
PrismaLST 2024 · Hack or exploit · $11.6M
DeltaPrime 2024 · Hack or exploit · $4.8M
Bungee 2024 · Hack or exploit · $3.3M
Miner 2024 · Hack or exploit · $466K
PrismaLST 2024 · Hack or exploit · $11.6M
DeltaPrime 2024 · Hack or exploit · $4.8M
Bungee 2024 · Hack or exploit · $3.3M
Miner 2024 · Hack or exploit · $466K
Cite this page
SwanBluechip, "ThalaSwap hack, Nov 15, 2024: $25.5M lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht4dd47ee21a/ (data as of 2026-10-31).