Thetanuts offers whitehat settlement for ~$105.5k exploit, requiring 90% fund return by June 19, 2026 with threat of legal action and exchange coordination.
Security & Exploits ·
Thetanuts, a decentralized options platform, disclosed a security incident and posted an onchain message offering a settlement framework to the actor responsible. The protocol is proposing to treat the matter as a whitehat disclosure if approximately $105.5k in funds—94,924.349170 USDC—is returned to the Thetanuts address by June 19, 2026, with the actor permitted to retain 10,547.149908 USDC as a bounty.
The settlement terms hinge on the return of 90% of the extracted amount within the specified timeframe. In exchange, Thetanuts commits to forgo legal action and issue a public statement confirming resolution. The protocol has stated it is coordinating with exchanges and monitoring for mixer activity, signaling active asset-tracking efforts.
The onchain message serves as a permanent record but is time-bound; after the June 2026 deadline, Thetanuts indicates it will pursue all available legal remedies. No details have been disclosed regarding the nature of the vulnerability exploited, the attack vector, or whether the actor has responded to the proposal.