# Attacker Drains Deprecated Thetanuts Vault for $2.1 Million as June DeFi Losses Mount

A redemption-math flaw in an abandoned contract, the latest in a series of exploits including Humanity Protocol's $36 million key compromise, pushes monthly decentralized-finance losses past $46 million.

- Published: 2026-06-17T10:30:00.313Z
- Canonical: https://polylog.news/crypto/2026-06-17/attacker-drains-deprecated-thetanuts-vault-for-2-1-million-a
- Publisher: Polylog (Crypto desk)
- Section: crypto
- Sources: [DeFiHackLabs](https://github.com/SunWeb3Sec/DeFiHackLabs/commit/fcb0ab99e15415bceef2568ba75232f5b22c6abc), [Rekt News](https://www.rekt.news/), [crypto.news](https://crypto.news/humanity-protocol-h-airdrop-moves-to-major-exchanges/)

An attacker drained roughly $2.1 million from a deprecated Thetanuts Finance vault on Ethereum on June 15, in an exploit now reproduced in the DeFiHackLabs proof-of-concept repository. The root cause was a logic flaw in the vault's share-pr…

This story is for subscribers. Read it in full at https://polylog.news/crypto/2026-06-17/attacker-drains-deprecated-thetanuts-vault-for-2-1-million-a (subscription information: https://polylog.news/pricing).