Thetanuts Finance (NUTS)

Wu said he learned that SlowMist issued a security alert stating that the options protocol Thetanuts Finance was attacked, causing a loss of about $2.1 million, but about $2 million of related positions were transferred to white‑hat addresses for protection. SlowMist indicated that the vulnerability stemmed from an integer division truncation issue in the mint(uint256) function. After the attacker reduced the vault's total supply to near zero via claim(uint256), the division result in the deposit calculation formula was truncated to 0, allowing the attacker to mint shares at zero cost indefinitely and withdraw funds. https://t.co/YqxQp4T59l