THORChain Hack Triggers $10.8M Loss as Cross-Chain Trading Halts

THORChain, a decentralized cross-chain liquidity protocol, suffered a major security breach on Friday, resulting in losses estimated at nearly $10.8 million. The exploit impacted the platform’s deployments across four separate blockchain networks, raising fresh concerns about vulnerabilities in decentralized finance (DeFi) infrastructure.

Following the attack, THORChain temporarily suspended all trading and signing activity to contain the incident. Blockchain investigator ZachXBT reported the emergency shutdown through Telegram, while on-chain governance data confirmed that the protocol’s Mimir governance module activated trading halt and signing halt parameters. The network pause lasted approximately 12 hours and 42 minutes.

Data from Arkham Intelligence revealed that the attacker’s wallets currently hold large amounts of stolen crypto assets spread across multiple chains. The holdings include 3,443 ETH valued at roughly $7.77 million, 36.85 BTC worth approximately $2.97 million, and 96.6 BNB valued near $66,000. The wallets were identified on Bitcoin, Ethereum, and Binance Smart Chain networks.

The exploit immediately affected market sentiment surrounding THORChain’s native token, RUNE, which fell nearly 12% after news of the breach emerged. Investors reacted sharply as uncertainty surrounding the protocol’s security and future operations intensified.

THORChain is widely known as a decentralized liquidity network that enables users to swap native digital assets between different blockchains without relying on wrapped tokens or centralized bridges. Despite its innovative approach, cross-chain liquidity protocols and blockchain bridges remain among the most frequently targeted sectors in the crypto industry.

Security incidents continue to plague the DeFi market in 2026. According to blockchain analytics firm Chainalysis, bridge-related hacks have resulted in more than $2.8 billion in stolen funds since 2021. In April alone, Drift Protocol and KelpDAO were linked to combined losses exceeding $600 million.

At the time of writing, THORChain has not released a detailed post-mortem explaining the exact attack vector behind the exploit.