THORChain loses $10.8M in hacker attack
Following the incident, the project temporarily halted trading operations and node activity.
15.05.2026 - 13:05
447
2 min
0
Key points:
- THORChain was hit by an exploit with estimated losses of roughly $10.8 million.
- The project temporarily suspended trading and transaction signing operations after the attack.
- RUNE fell about 12% following the breach, while the investigation into the exploit remains ongoing.
Cross-chain liquidity protocol THORChain suffered a hacker attack that resulted in estimated losses of approximately $10.8 million. The exploit affected deployments across four different blockchains.
After detecting the attack, the project team suspended trading operations and transaction signing functions. Blockchain investigator ZachXBT first reported the incident on Telegram.
According to Arkham Intelligence, wallets linked to the suspected attacker currently hold:
- 3,443 ETH worth around $7.77 million,
- 36.85 BTC valued at approximately $2.97 million,
- 96.6 BNB worth about $66,000.
THORChain’s governance module Mimir triggered an emergency network shutdown. Network nodes were temporarily paused for more than 12 hours starting from block 26190429.
Following the news, the RUNE token dropped by roughly 12%.
Cross-Chain Protocols Remain a Prime Target for Hackers
THORChain is a decentralized liquidity network that allows users to swap native assets across different blockchains without relying on centralized intermediaries.
However, cross-chain bridges and liquidity protocols remain among the most vulnerable sectors in DeFi. According to Chainalysis, losses tied to attacks on such services have exceeded $2.8 billion since 2021.
The issue continues to affect the broader crypto industry. In April alone, restaking protocol KelpDAO and decentralized exchange Drift Protocol suffered combined losses of more than $600 million from separate attacks.
THORChain has not yet released a technical post-mortem or disclosed the suspected attack vector behind the exploit.
Useful material?
Telegram 
Twitter Incidents
In a single week, hackers went after PHP websites, the Railway cloud platform and a medical company, and experts started talking about a crisis that is only just beginning.
Oct 28, 2026
Incidents
In 104 minutes, the attacker emptied 1,404 addresses before validators halted the network and froze almost all of the loot.
Oct 19, 2026
Incidents
Developers warned of potential risks to bridges across the ecosystem and asked exchanges for assistance.
Jun 22, 2026
Incidents
The defendant helped move funds stolen through investment scams and earned at least $4 million for his role in the operation.
Jun 10, 2026
Incidents
The company is linking the incident to a compromised private key on a service wallet, rather than a smart contract exploit
May 22, 2026
Incidents
The user spent weeks unsuccessfully trying to guess the password until Claude helped find an old wallet backup file
May 14, 2026
Cryptocurrency rates
-
Bitcoin
$77 608
BTC
+1.08%
-
Ethereum
$2 262.78
ETH
+1.03%
-
BNB Smart Chain
$703.14
BSC
+0.69%
-
Ripple
$1.42
XRP
+1.04%
-
TRON
$0.303608
TRX
-7.99%
-
Zcash
$1 281.31
ZEC
+3.28%
-
Dogecoin
$0.07601
DOGE
+0.76%
-
Cardano
$0.218269
ADA
+2.11%
-
Stellar XLM
$0.184461
XLM
+2.83%
-
Bitcoin Cash
$285.37
BCH
-1.31%