PANews reported on June 16th that, according to SlowMist monitoring, the DeFi protocol Thetanuts Finance suffered an attack, resulting in a loss of approximately $2.1 million. However, it appears that approximately $2 million in positions have been recovered by white-hat hackers. The vulnerability stemmed from integer division truncation in the `mint` function: after the `claim` function depleted the total vault supply to near zero, the `amount` parameter in the `depositAmount` calculation formula resulted in a value of 0, leading to unlimited free minting.

In response, Thetanuts Finance stated that preliminary investigations indicate the attack targeted an abandoned vault that had been relocated years ago and was unrelated to any current contracts or products. The team will release a post-incident analysis report once more details are available.