THORChain
HackedDeFi · $RUNE · born 2018 · ✝ 2026
A cross-chain DEX paused for five weeks after a $10.7M vault exploit.
THORChain enables native cross-chain swaps without wrapped tokens. In May 2026 attackers drained ~$10.7M from one of six Asgard vaults across Bitcoin, Ethereum, BNB Chain, and Base, forcing a five-week trading halt.
- Peak
- ~$10.7M stolen (single vault)
- Cause
- Hacked
- Year of death
- 2026
☠️ Cause of death
A vulnerability in one vault's key-management path let attackers extract funds while five other vaults remained intact. The protocol prioritised security verification over speed, checking every keyshare before restarting swaps in late June 2026.
📓 Lessons left behind
- —Multi-vault architectures contain damage but don't prevent it.
- —Cross-chain native swaps concentrate risk in threshold signing.
- —Pausing a DEX for weeks is possible; making users whole is harder.
🌱 The idea that survived
Native cross-chain liquidity
THORChain resumed with tighter vault audits — the underlying idea (swap native BTC for ETH without bridges) still has no clean-kill competitor.
#defi#cross-chain#dex#vault