THORChain is a decentralized liquidity protocol built on its own layer-1 blockchain that operates as a cross-chain automated market maker (AMM). It is designed to enable native asset swaps between a wide range of networks, including Bitcoin and other UTXO-based chains, as well as Ethereum and other EVM-compatible ecosystems, without relying on wrapped tokens or centralized intermediaries. The network is secured through its native token, RUNE, which plays multiple roles within the protocol. RUNE is paired with every other supported asset in liquidity pools, serves as the settlement asset for trades, and is staked by node operators to validate transactions and provide economic security to the chain. Validators must bond RUNE, making it integral to the network's consensus mechanism. By functioning as a bridge and exchange layer simultaneously, THORChain aims to create a unified liquidity layer that connects previously siloed blockchain ecosystems. Its design supports peer-to-peer swaps across a growing list of networks, allowing users to move value between chains in a single transaction.
The brief halt exposed a key dependency: distributed validator control cannot override Tether’s power to freeze USDT held in external-chain vaults.
The funds remained intact, but the freeze briefly halted THORChain services and left 19 other addresses blacklisted with no explanation from Tether.
Five days generated 63% of September income, tying the revenue spike to exceptional hack-linked flows rather than broad wallet growth.
The dispute tests where permissionless access ends when stolen funds move through a protocol, with the recent vault attack underscoring the security stakes.
The dispute puts THORChain’s permissionless design against calls for targeted intervention after a major exchange breach.
The exchange's Oct. 2 reopening schedule lumps XRP into the final phase, while Bitquery traced 27.63M of the stolen 102.98M XRP flowing toward THORChain and swaps into Bitcoin.
The dispute puts THORChain's emergency controls and validator structure at the center of a wider debate over decentralization and illicit-finance compliance.
The dispute puts a focus on whether decentralized protocols should intervene when publicly flagged addresses move funds linked to a major exploit.
After $16.5B in cumulative DeFi exploits, the latest THORChain incident is forcing protocols toward the centralised-style controls they once resisted — Aave's rsETH bad debt is the canary.
ZachXBT flagged the cross-chain drain on Tuesday, and the protocol paused trading within hours — the second major halt in a year for a venue positioned as a native-asset swap layer.
A four-chain drain hitting BTC, ETH, BNB and Base layers puts THORChain back on incident-watch — the fourth or fifth security event on a protocol that has been here before.
The pause and the missing post-mortem are the real story: cross-chain bridges have absorbed more than $2.8B in thefts since 2021, and Thorchain has not yet named the attack vector.
On-chain investigator @zachxbt flagged the multi-chain drain minutes after the funds started moving; the $10M mark is a live count and likely to climb as the attacker's wallets are tracked.
THORChain is the first decentralized exchange (DEX) to swap Bitcoin, and other UTXO chains, with Ethereum, and other EVM chains.
THORChain (RUNE) is categorised as: Decentralized Exchange (DEX), Infrastructure, Smart Contract Platform.
The official THORChain site is https://thorchain.org/.
Most recent THORChain coverage: "Tether Freeze Disrupts THORChain’s TRON USDT Route" — read at /en-US/a/tether-freeze-disrupts-thorchains-tron-usdt-route.
CryptoSlate
WuBlockchain
TheBlock
CoinDesk
Lookonchain
