Thetanuts Finance suffered a $2.1 million loss in an attack, with approximately $2 million apparently recovered by white-hat hackers.

CoinFeed reported on June 16th that, according to SlowMist, the DeFi protocol Thetanuts Finance suffered an attack, resulting in a loss of approximately $2.1 million. However, it appears that approximately $2 million in positions were recovered by white-hat hackers. The vulnerability stemmed from integer division truncation in the `mint` function: after the `claim` function depleted the total vault supply to near zero, the `amount` parameter in the `depositAmount` calculation formula resulted in a value of 0, leading to unlimited free minting. Thetanuts Finance responded that preliminary investigations indicate the attack targeted an abandoned vault that had been migrated years ago and is unrelated to any current contracts or products. The team will release a post-attack analysis report once more details are available.