Back Theblock.Co

THORChain pauses trading as security researchers flag suspected $10M multi

Theblock.Co • May 15, 2026

THORChain paused trading after blockchain security researchers ZachXBT and PeckShield flagged a suspected exploit spanning Bitcoin, Ethereum, BNB Smart Chain and Base, with estimated losses of more than $10 million.

ZachXBT and PeckShield both identified two alleged theft addresses on the Bitcoin network and EVM-compatible chains.

THORChain confirmed one of its six Asgard vaults was compromised for approximately $10.7 million in protocol-owned funds, saying initial indications show no individual user swaps were affected.

RUNE fell as much as 11% on the news, trading around $0.52 at the time of publication, according to CoinGecko data.

The incident adds to a pattern of security and operational disruptions involving the cross-chain liquidity protocol.

THORChain previously suspended its ThorFi lending operations in January 2025 amid insolvency allegations and implemented a 90-day restructuring through validators.

The protocol subsequently resolved a $200 million debt crisis by converting defaulted obligations into a new equity-style token.

In September 2025, THORSwap issued a bounty following a roughly $1.2 million exploit of THORChain founder John-Paul Thorbjornsen's personal wallet, which ZachXBT linked to North Korean hackers.

The protocol has also emerged repeatedly as a cross-chain laundering route in unrelated exploits.

One of the most recent cases occurred when funds from the Kelp DAO hack were moved from ETH to BTC via THORChain, spiking its daily volume to $394 million, as The Block reported .

This is a developing story.

Disclaimer: The Block is an independent media outlet that delivers news, research, and data. As of November 2023, Foresight Ventures is a majority investor of The Block. Foresight Ventures invests in other companies in the crypto space. Crypto exchange Bitget is an anchor LP for Foresight Ventures. The Block continues to operate independently to deliver objective, impactful, and timely information the crypto industry. Here are our current financial disclosures .

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

THORChain Suffers $10.7M Exploit, Trading Halted Amid Security Concerns On May 15, 2026, THORChain paused trading operations after a security breach was detected, resulting in an estimated loss of approximately $10.7 million. The exploit, traced by blockchain researchers ZachXBT and PeckShield, affected multiple blockchain networks including Bitcoin, Ethereum, BNB Smart Chain, and Base. The attackers exploited vulnerabilities in the protocol's Asgard vaults, leading to unauthorized transactions. THORChain's RUNE token fell by 11% following the incident, trading at around $0.52. The protocol had previously faced scrutiny for its handling of funds linked to North Korean hackers. As of now, THORChain's development team is investigating the root cause of the breach and has halted certain operations to prevent further losses. This incident adds to a series of security challenges faced by THORChain in recent years. 20 sources 68

THORChain pauses trading as security researchers flag suspected $10M multi

The full story

Extracted Entities

Companies (3)

Platforms (3)