[Scam] revoke-thorchain.org - Fake Thorchain Asset Recovery Portal

[Bitcoin_Arena]

What happened: As some of you might know by now, Thorchain had a security incident where about $10M worth of crypto was drained by bad actors. However, immediately after the incident, there have been fake asset recovery portals coming up, which are aimed at scamming more people. Please be careful.

Scammer's fake x.com profile Link: https://x.com/thorchnfnd

Reference Link: https://x.com/thorchnfnd/status/2055428816072294481

Scam website:

Code:

revoke-thorchain.org

Archive of scam website: https://archive.ph/wnXmz

Screenshot of scam website:

Additional Notes:

The scam website was created a day after the hack incident

Code:

Domain Information
Domain: revoke-thorchain.org
Registered On: 2026-05-15
Expires On: 2027-05-15
Updated On: 2026-05-15

The only genuine domain name is https://swap.thorchain.org/

Code:

Domain Information
Domain: thorchain.org
Registered On: 2018-05-10
Expires On: 2028-05-10
Updated On: 2026-03-19

[_act_]

The scammer's X account has been registered since 2013, but he is waiting for this time to scam people. If you go to the site, you will see connect wallet. I hope no one will connect to that wallet because such victim might foolishly do something stupid that can drain his wallet. This kind of scam is new to me, and X just left it. It is better people start reporting the account.

[yhiaali3]

Thank you for reporting this fraudulent website. This is the worst kind of scam and I can't find the right words to describe all this depravity. They exploit the victims' difficult psychological state and use their pain to scam them again instead of helping them.

These scammers should be reported and prosecuted in any country because they are the worst kind of scammers, and the warning should be widely publicized to prevent these victims from falling victim again and compounding their pain.

[RGBTC]

I read the Thorchain exploit announcement on X was posted around 9:55 PM (UTC +7), and this fake website was registered and created on the same day the exploit occurred. It's remarkable how fast the scammers were, perhaps it was created by the same people behind the hack? AI tools really do make scams that efficient.

[CryptSafe]

I read the Thorchain exploit announcement on X was posted around 9:55 PM (UTC +7), and this fake website was registered and created on the same day the exploit occurred. It's remarkable how fast the scammers were, perhaps it was created by the same people behind the hack? AI tools really do make scams that efficient.

The possibility that the exploiters who hacked the Thorchain are the same people who put up that revoke website and x account. They long strategically planned their mission, and they had already predicted the announcement. While waiting for it to take place, they quickly put up theirs to begin from where they stopped.  It would be nice if the account were massively reported on X so that it would be banned from the platform, reducing the risk of scamming more people.