THORChain Halted After Fresh Exploit Rocks Cross-Chain DeFi
After $16.5B in cumulative DeFi exploits, the latest THORChain incident is forcing protocols toward the centralised-style controls they once resisted — Aave's rsETH bad debt is the canary.
THORChain is a decentralized liquidity protocol built on its own layer-1 blockchain that operates as a cross-chain automated market maker (AMM). It is designed to enable native asset swaps between a wide range of networks, including Bitcoin and other UTXO-based chains, as well as Ethereum and other EVM-compatible ecosystems, without relying on wrapped tokens or centralized intermediaries. The network is secured through its native token, RUNE, which plays multiple roles within the protocol. RUNE is paired with every other supported asset in liquidity pools, serves as the settlement asset for trades, and is staked by node operators to validate transactions and provide economic security to the chain. Validators must bond RUNE, making it integral to the network's consensus mechanism. By functioning as a bridge and exchange layer simultaneously, THORChain aims to create a unified liquidity layer that connects previously siloed blockchain ecosystems. Its design supports peer-to-peer swaps across a growing list of networks, allowing users to move value between chains in a single transaction.
After $16.5B in cumulative DeFi exploits, the latest THORChain incident is forcing protocols toward the centralised-style controls they once resisted — Aave's rsETH bad debt is the canary.
ZachXBT flagged the cross-chain drain on Tuesday, and the protocol paused trading within hours — the second major halt in a year for a venue positioned as a native-asset swap layer.
A four-chain drain hitting BTC, ETH, BNB and Base layers puts THORChain back on incident-watch — the fourth or fifth security event on a protocol that has been here before.
The pause and the missing post-mortem are the real story: cross-chain bridges have absorbed more than $2.8B in thefts since 2021, and Thorchain has not yet named the attack vector.
On-chain investigator @zachxbt flagged the multi-chain drain minutes after the funds started moving; the $10M mark is a live count and likely to climb as the attacker's wallets are tracked.
THORChain is the first decentralized exchange (DEX) to swap Bitcoin, and other UTXO chains, with Ethereum, and other EVM chains.
THORChain (RUNE) is categorised as: Decentralized Exchange (DEX), Infrastructure, Smart Contract Platform.
The official THORChain site is https://thorchain.org/.
Most recent THORChain coverage: "THORChain Halted After Fresh Exploit Rocks Cross-Chain DeFi" — read at /en-US/a/thorchain-exploit-forces-emergency-chain-halt-defis-trust.