A legacy vault of Thetanuts Finance on Ethereum was exploited due to a flaw in redemption math and integer calculations, resulting in a net loss of approximately $105,000 after a whitehat recovered most of the drained funds. Current products and active contracts were unaffected.
Thetanuts Finance experienced a First Depositor Attack on a newly deployed vault, resulting in a loss of approximately $50,000. The attacker manipulated the share calculation logic during initialization to mint shares and then transfer assets, effectively draining the vault.