Thetanuts Finance Suspected Attack Results in Approximately $2.1 Million Loss, Some Assets Recovered by White Hats
Thetanuts Finance is suspected to have experienced an attack, with preliminary estimated losses of approximately $2.1 million.
About $2 million in option tokens were recovered through white hat intervention, while the attacker exchanged approximately $105,000 USDC for about 60 ETH and still holds around $34,000 USDC in option token assets.
In market mechanisms, DeFi protocol users accelerate redemption or asset transfer to avoid risks, with funds flowing from the attacked protocol to platforms with strict security audits. White hat intervention and rapid responders benefit, while projects exposed to security vulnerabilities face pressure.
Source: Public Information
ABAB AI Insight
Thetanuts Finance, as an options DeFi protocol, previously focused on structured products and yield strategies, deploying across multiple chains and attracting liquidity. However, similar to previous attacks on DeFi protocols, even with white hat intervention, the attack window still results in some permanent loss of funds and shaken user confidence.
In terms of capital flow, the protocol team and white hats quickly mobilized resources to freeze and recover most option tokens, while the attacker realized some profit through on-chain exchanges, motivated by exploiting potential smart contract vulnerabilities or operational risks for arbitrage, continuing to push the industry towards stricter audits and real-time monitoring mechanisms.
Similar cases include multiple flash loan attacks and white hat rescue events from 2023 to 2025, such as the Ronin bridge and several options platforms that strengthened security after similar losses. Thetanuts is currently in a phase of transitioning from rapid growth to a security-first approach in the DeFi options sector, exposed to attacks.
Essentially, this represents a technological substitution: on-chain attacks expose protocol design flaws through vulnerability exploitation mechanisms, pushing capital from high-yield but fragile DeFi products towards mature platforms with complete custody, auditing, and recovery mechanisms, and accelerating the reconstruction of industry security infrastructure.
ABAB News · Cognitive Law
White hats recovered most, while remaining losses represent the true risk pricing leverage.
The shorter the attack window, the faster the protocol's reputation can recover; security is the moat for sustained capital flow in DeFi.
When option yields are enticing, vulnerabilities are the invisible switch that turns TVL into attackers' ETH.