THORChain Resumes After $10.7M Exploit — Upgrades and Future Plans
By John Nada·Jun 23, 2026·4 min read
THORChain resumes operations post-$10.7M exploit with security upgrades. Future plans include Zcash and Monero integrations.
May 15 was a day THORChain won't forget soon. A $10.7 million exploit hit the protocol, forcing a halt in trading. But that's old news. Now, THORChain is back and buzzing.
Tuesday marked the return of full network functionality, as THORChain announced via a social media post. It's been over a month of checking every nook and cranny for security lapses. Trading, signing, swaps — all back on the menu.
The protocol left no stone unturned in its recovery. Security verifications, upgrades, and a migration away from its legacy vaults were all part of a rigorous plan. According to Cointelegraph, the new vaults are now verified by the KeyVerify protocol — a milestone THORChain lauds as pivotal in its recovery.
THORChain isn't just any trading protocol. For enthusiasts in the crypto space, it’s a vital cross-chain trading platform, enabling transactions between networks like Bitcoin and Ethereum. This exploit, however, painted a target on its back, catching the eyes of blockchain investigators wary of hackers using it for illicit gains.
The vulnerability lay in its GG20 threshold signature scheme, a structure meant to distribute control of vault keys across various node operators. The flaw? It allowed a malicious node to piece together a full private key through 'progressive key material leakage,' leading to the hefty theft. According to Cointelegraph, THORChain patched this on May 20, issued a comprehensive upgrade on June 9, and followed it up with stability improvements by June 11.
The GG20 threshold signature scheme was initially designed for a high level of security, distributing control and thereby reducing the risk of a single point of failure. However, the exploit revealed a critical vulnerability in this approach, emphasizing the need for regular audits and updates in cryptographic protocols. THORChain's swift action post-exploit, including the emergency patch on May 20, showcased its commitment to security and user protection.
Another layer to THORChain's security enhancement comes from retiring its legacy vaults. The protocol's decision to move to a new set of vaults verified by the KeyVerify protocol marks a significant upgrade. This migration not only addresses past vulnerabilities but also sets a new standard for security, aiming to restore user trust and confidence.
$170M in ETH Longs Liquidated — Market Confidence Wavers
Ethereum faces $170M in futures liquidations amid a 5% price drop, highlighting market uncertainty.
The integration of KeyVerify protocol into THORChain's infrastructure represents a forward-thinking approach to security. By verifying each vault and node's keyshare, THORChain is not only securing its network against future exploits but also setting a precedent for other protocols in the industry. This rigorous verification process ensures that all potential risks are mitigated, providing a more robust and secure trading environment for its users.
With the recovery process largely complete, THORChain has also outlined plans for new network integrations. THORChain said it will launch native swaps and vaults for privacy-preserving cryptocurrency Zcash (ZEC) within the next two weeks, followed by Monero (XMR). These integrations signify THORChain’s commitment to expanding its platform's capabilities and offering more options to its users.
The inclusion of privacy coins like Zcash and Monero highlights a growing trend in the crypto industry, where privacy and anonymity are becoming increasingly valued by users. By supporting these coins, THORChain not only enhances its service offering but also aligns itself with the broader movement towards privacy-focused financial solutions.
Moreover, THORChain plans to launch support for the Bittensor (TAO) token in about six weeks after the network’s restart. This planned integration further underscores THORChain’s strategy of diversification and expansion. By continually adding support for new tokens, THORChain is positioning itself as a versatile and comprehensive trading platform.
In a space fraught with risk, THORChain's response underscores a commitment to security and growth. Not just about safeguarding assets — they're laying a foundation for future endeavors. The protocol's proactive measures post-exploit serve as a case study for other blockchain projects on how to handle security breaches effectively. By focusing on both immediate fixes and long-term improvements, THORChain is setting itself up for sustained success and resilience in the ever-evolving crypto landscape.
THORChain’s journey from an exploited protocol to a fortified network demonstrates the dynamic nature of blockchain technology and the constant need for vigilance. As the crypto industry continues to grow, protocols like THORChain will play a crucial role in shaping the future of decentralized finance and cross-chain trading.