Thala: app.thala.fi is now online, but farming functions are still suspended

Thala, the DeFi project of the Aptos ecosystem, posted on X that app.thala.fi is now back online. Please note that for security measures, the farming function is still suspended, which means that users cannot pledge/unstake until all affected modules are repaired and re-audited. Yesterday, Thala issued the latest announcement stating that due to the latest V1 liquidity pool contract being attacked by a security vulnerability, assets worth $25 million were stolen. At present, Thala has suspended all related contracts and frozen Thala token assets ($9 million MOD and $2.5 million THL). With the assistance of other institutions, it has agreed with the attacker to restore all user assets through a $300,000 bounty. It should be noted that affected users do not need to take further action and their positions will be 100% restored. However, all related contracts and the Thala front end will remain suspended until they are deemed completely safe. Existing positions in the CDP and LST modules are not affected. At present, the code base of the protocol is undergoing extensive review and re-audit of all affected and related packages.