Thetanuts Finance Vault Exploit Results in $2.1M Loss

Thetanuts Finance confirmed an exploit on June 15, 2026, draining $2.1 million from a deprecated vault. The vault, which had been migrated years ago, was compromised due to a vulnerability in its redemption logic. PeckShieldAlert reported that approximately $2 million in option tokens were recovered by whitehat efforts, while the attacker converted $105,000 in USDC to around 60 ETH. The remaining funds include $34,000 in USDC-denominated option tokens held by the attacker. The incident highlights the risks associated with deprecated protocols, as similar attacks have occurred recently, including one on Aztec Connect. Thetanuts Finance reassured users that current contracts are not affected and plans to release a full post-mortem report. The total value hacked in DeFi for June has surpassed $46 million, indicating a concerning trend in security incidents.

Key Points: • Thetanuts Finance lost $2.1 million due to an exploit of a deprecated vault. • A vulnerability in the vault's redemption logic was identified as the attack vector. • The incident reflects a broader trend of attacks on deprecated DeFi protocols.