Thorchain halts trading after $10 million cross-chain exploit

[Oshosondy]

Thorchain’s RUNE token fell about 12% following the news after the exploit.

Wallets linked to the attacker currently hold roughly 3,443 ETH, 36.85 BTC and 96.6 BNB, while Thorchain’s RUNE token fell about 12 percent following the news.

Totally amount seen so far is $10.8 million across Bitcoin, Ethereum, BSC, and Base.

https://www.coindesk.com/tech/2026/05/15/thorchain-halts-trading-after-usd10-million-cross-chain-exploit-rune-token-drops-12

I have also been seeing the exploit on X.

[cLoazyL]

Thorchain’s RUNE token fell about 12% following the news after the exploit.

Wallets linked to the attacker currently hold roughly 3,443 ETH, 36.85 BTC and 96.6 BNB, while Thorchain’s RUNE token fell about 12 percent following the news.

Totally amount seen so far is $10.8 million across Bitcoin, Ethereum, BSC, and Base.

https://www.coindesk.com/tech/2026/05/15/thorchain-halts-trading-after-usd10-million-cross-chain-exploit-rune-token-drops-12

I have also been seeing the exploit on X.

The DPRK is also targeting places where they exchanged their dirty money, very interesting

[Yamane_Keto]

THORChain protocol team did not release any technical details, but it is worth noting that the protocol processed $394 million at the same time as the hack. I think hackers exploited this and found a vulnerability by making the contract believe a large deposit had been made, and then requested a refund, which leads to draining liquidity pools.

[cLoazyL]

THORChain protocol team did not release any technical details, but it is worth noting that the protocol processed $394 million at the same time as the hack. I think hackers exploited this and found a vulnerability by making the contract believe a large deposit had been made, and then requested a refund, which leads to draining liquidity pools.

You have some details there: https://x.com/depouch/status/2055275129333023113

But I'm still waiting for more informations!!

[TryNinja]

The DPRK is also targeting places where they exchanged their dirty money, very interesting

Money is money. They have no problem exploiting their own bridges.

At the end of the day, Thorchain will come back and they will keep using it.

[Bitcoin_Arena]

The DPRK is also targeting places where they exchanged their dirty money, very interesting

But how do people come up with theories that for some reason the massive hacks are always linked to the Democratic People's Republic of Korea? Even when the funds are just seated in some yet-to-be-identified addresses, the immediate suspect is North Korea. Back in the day it would also be Russian hackers or something along those lines. For some reason we never hear about anything about hackers from the UK or hackers from the US. Quite suspicious, isn't it?