Decentralized liquidity protocol THORChain halted buying and selling after blockchain investigator ZachXBT flagged a suspected exploit of greater than $10 million.
A THORChain alerts Telegram channel confirmed all buying and selling and signing halted, with a worldwide node pause prolonged till block 26191149, or roughly 12 hours and 42 minutes. The halt got here shortly after ZachXBT mentioned the protocol had doubtless been exploited throughout Bitcoin, Ethereum, BNB Chain and Base.
A pockets labeled by Arkham because the THORChain exploiter confirmed $10.8 million in holdings, transferred throughout a number of smaller transactions within the half-hour earlier than 10:11 am UTC.
The suspected exploit provides to the mounting safety issues round decentralized finance (DeFi) protocols, after hackers stole over $634 million throughout April, marking the very best month-to-month sum because the $1.46 billion in February 2025, when hackers staged the report $1.4 billion hack on Bybit change, DefiLlama knowledge exhibits.
Cointelegraph reached out to THORChain for remark. The protocol had not publicly confirmed the exploit on the time of publication, although ZachXBT and PeckShield flagged suspicious exercise, and THORChain alerts confirmed buying and selling and signing had been halted.
Thorchain exploiter-tagged pockets. Supply: Arkham
RUNE value falls 13% after suspected exploit
THORChain’s RUNE token fell by round 13% following the suspected exploit and traded close to $0.51 on the time of writing, in accordance with CoinGecko knowledge.
RUNE/USD, one-day chart. Supply: CoinGecko
The most recent correction provides extra strain to the token’s value motion, which is down 72% through the previous 12 months.
Associated: Kelp DAO exploit prompts DeFi protocols to rethink oracle suppliers
As a non-custodial cross-chain protocol, THORChain has repeatedly been utilized by malicious actors to swap stolen funds, although it isn’t a cryptocurrency mixer like Twister Money.
Earlier in April, the attacker behind the $293 million Kelp DAO exploit swapped 75,700 Ether (ETH) by means of THORChain, producing about $910,000 in income for the protocol.
The vast majority of the $1.4 billion stolen through the Bybit hack, or about $1.2 billion, was additionally moved by means of THORChain by hackers, who swapped it from Ether to Bitcoin, in accordance with Bybit co-founder and CEO Ben Zhou.