THORChain Bug Halts Swaps Across 10 Networks
Ecosystem
English
News
Latest News
Bitcoin | Ethereum | Altcoins | Blockchain | Regulation | Markets | Features | Magazine | Reviews | Research | Opinion | Podcasts | Newsletters | Commissioned Articles | Press Releases | Special Projects
About | About Cointelegraph | History of Cointelegraph | Editorial Policy | Ads Disclosure | Financial Risk Disclaimer
- DOGE: $0.07439 (-2.03%)
- TRX: $0.3204 (+2.21%)
- LINK: $11.10 (-2.53%)
- ZEC: $1,147.62 (-8.56%)
- ADA: $0.1896 (-2.22%)
- XRP: $1.25 (-0.61%)
- ETH: $2,258.77 (-1.58%)
- BTC: $77,164.04 (-1.71%)
- XMR: $604.97 (+0.58%)
- BNB: $699.37 (-2.14%)
- XLM: $0.1621 (-4.08%)
- SOL: $92.38 (-2.86%)
- HYPE: $84.25 (-4.22%)
Written by:
- Felix Ng - staff editor
- Yohan Yun - staff editor
THORChain Bug Halts Swaps After Block Reorg
Latest News
Published: Nov 2, 2026
THORChain node operators paused swaps involving assets on 10 networks, including Bitcoin, Ethereum, Solana, and Tron, following a bug caused by an Ethereum block reorganization.
THORChain halted swaps across multiple blockchains on Saturday after an Ethereum block reorganization exposed a refund bug. This bug may have inadvertently slowed the movement of funds stolen from Binance, according to Chainalysis.
Here’s what happened:
At 11:34 UTC on Saturday, a one-block reorganization on Ethereum removed a 10 ETH deposit that THORChain had already credited. This triggered a refund for a swap that failed to meet its price limit, resulting in an extra 10 ETH payout. This automatic pause affected all chains except Avalanche, Base, and XRP.
The Risk:
The newly discovered flaw allows THORChain to refund payments that Ethereum no longer recognizes. A malicious actor could potentially exploit this mismatch.
Impact on Binance Hackers:
The trading halt disrupted attempts by North Korean hackers to launder funds stolen in last week’s $6.3 billion Binance hack, according to Chainalysis. Until the service comes back online, hackers and money launderers will face roadblocks.
THORChain’s Response:
"Nodes will decide to re-enable chains as they are deemed safe.”
Read More:
- [THORChain’s RUNE jumps 13% after Binance’s record $6.3B hack](link to relevant article)
- [North Korean hackers have used THORChain to permissionlessly swap cryptocurrencies following previous attacks.](link to relevant article)