Is Thala Safe?
Risk Grade: C+ (39/100)
Thala is rated as elevated risk — multiple novel mechanisms and notable interaction risks.
Moderate risk — already exploited once, with concentrated Aptos-ecosystem exposure and dangerously cheap governance capture
An all-in-one DeFi platform on the Aptos blockchain offering token swaps, a stablecoin (MOD), and liquid staking. It manages $200M in deposits with $6M in funding. Its C+ grade reflects a $25.5M hack in November 2024 and the fact that all its collateral is tied to a single blockchain's token, creating concentrated crash risk.
TVL
$12M
Mechanisms
7
Interactions
5
Value Grade
D+
Key Risks for Thala Users
Hackers drained $25.5M in November 2024 by exploiting a missing security check -- the funds were recovered through a bounty deal, but the same pattern could repeat
Every type of collateral backing the MOD stablecoin is tied to the Aptos token -- if APT crashes hard, all collateral fails at the same time
With only a $3M token valuation, someone could buy enough voting power to take over the protocol and redirect its funds for less than the cost of a house
Top Risk Factors
- •November 2024 exploit drained $25.5M from v1 farming contracts due to missing withdrawal validation; recovered via $300K bounty negotiation
- •MOD stablecoin depends on Aptos-native collateral concentration; a sharp APT decline threatens all vault collateral simultaneously
- •veTHL governance capture is feasible at ~$3M FDV, enabling emission redirection and treasury extraction at minimal cost
Risk Score Breakdown
Thala's highest risk area is Vitality Risk (7/10). Here's how each dimension contributes to the overall 39/100 score:
Read the Full Thala Risk Report
This protocol has 3 collapse scenarios. 1 critical and 2 high-severity interaction risks identified. See the full mechanism classification, interaction matrix, and deep-dive recommendations.
View Full Report →Considering an investment?