$10M Gone: Thorchain Exploit Triggers Security Fears Across DeFi

Bitcoinist05-17 11:00

Trusted Editorial content, reviewed by leading industry experts and seasoned editors. Ad Disclosure Blockchain tracking firm Arkham Intelligence has labeled a set of suspicious wallets as “THORChain ...

Source Link

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

Comments

We need your insight to fill this gap

Leave a comment

{"i18n":{"language":"en_US"},"isChannel":false,"data":{"share":"https://ttm.financial/m/news/2636099799?lang=en_US&edition=fundamental","thumbnail":"https://bitcoinist.com/wp-content/uploads/2026/05/a_f7c1a5.avif?resize=350,250","is_english":true,"pubTime":"2026-05-17 11:00","share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","id":"2636099799","market":"nz","top_or_hot":-1,"title":"$10M Gone: Thorchain Exploit Triggers Security Fears Across DeFi","media":"Bitcoinist","content":"<div>\n<p>Trusted Editorial content, reviewed by leading industry experts and seasoned editors. Ad Disclosure\n\nBlockchain tracking firm Arkham Intelligence has labeled a set of suspicious wallets as “THORChain ...</p>\n\n<a href=\"https://bitcoinist.com/10m-gone-thorchain-exploit-triggers-security-fears-across-defi/\">Source Link</a>\n\n</div>\n","source":"bitcoinist_highlight","html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>$10M Gone: Thorchain Exploit Triggers Security Fears Across DeFi</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\n$10M Gone: Thorchain Exploit Triggers Security Fears Across DeFi\n</h2>\n\n<h4 class=\"meta\">\n\n\n2026-05-17 11:00 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://bitcoinist.com/10m-gone-thorchain-exploit-triggers-security-fears-across-defi/><strong>Bitcoinist</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>Trusted Editorial content, reviewed by leading industry experts and seasoned editors. Ad Disclosure\n\nBlockchain tracking firm Arkham Intelligence has labeled a set of suspicious wallets as “THORChain ...</p>\n\n<a href=\"https://bitcoinist.com/10m-gone-thorchain-exploit-triggers-security-fears-across-defi/\">Source Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","isBrief":false,"type":0,"news_type":1,"symbol":"ETQ","symbol_name":"T-Rex 2X Inverse Ether Daily Target ETF","start_time":0,"source_url":"https://bitcoinist.com/10m-gone-thorchain-exploit-triggers-security-fears-across-defi/","article_id":"2636099799","we_media_id":null,"thumbnails":["https://bitcoinist.com/wp-content/uploads/2026/05/a_f7c1a5.avif?resize=350,250"],"rights":{"source":"bitcoinist_highlight","url":"https://bitcoinist.com/10m-gone-thorchain-exploit-triggers-security-fears-across-defi/","rn_cache_url":null,"directOrigin":true},"url":"https://stock-news.laohu8.com/highlight/detail?id=2636099799","pubTimestamp":1778986801,"columns":[],"sourceInfo":{"source_id":"bitcoinist_highlight","name":"Bitcoinst"},"weMediaInfo":null,"summary":"Blockchain tracking firm Arkham Intelligence has labeled a set of suspicious wallets as \"THORChain Exploiter\" addresses, with one Bitcoin-linked wallet...","collect":0,"end_time":0,"defaultTopTitle":"bitcoinist.com","property":[],"viewcount":null,"language":"en","relate_stocks":{"ETQ":"T-Rex 2X Inverse Ether Daily Target ETF","SETH":"1倍做空以太币期货ETF-Proshares","TETH":"21Shares Ethereum ETF","ETCO":"Grayscale Ethereum Covered Call ETF","ETHT":"ProShares Ultra Ether ETF","ETU":"T-Rex 2X Long Ether Daily Target ETF","ESK":"REX-Osprey ETH + Staking ETF","BTF":"比特币&以太币期货ETF-CoinShares","ETHU":"2倍以太币期货ETF-Volatility Shares","YETH":"Roundhill Ether Covered Call Strategy ETF","ETHV":"以太坊ETF-VanEck","FETH":"以太币ETF-Fidelity","ETHW":"以太坊ETF-Bitwise","ETH":"低成本以太坊ETF-Grayscale","ETHA":"以太坊ETF-iShares","EETH":"以太币期货ETF-ProShares","ETHD":"ProShares UltraShort Ether ETF","EZET":"以太坊ETF-Franklin","ETHI":"Defiance Leveraged Long Income Ethereum ETF","ETHE":"最大以太坊ETF-Grayscale","QETH":"以太坊ETF-Invesco Galaxy"},"translate_title":"1000万美元消失：Thorchain漏洞引发DeFi的安全担忧","themeId":null,"isJumpTheme":false,"ttsUrl":null,"symbols_score_info":{"ETHU":0.6,"ETQ":0.6,"ETHV":0.6,"ETHD":0.6,"EETH":0.6,"ETHE":0.6,"ETH":0.6,"ETHT":0.6,"SETH":0.6,"ETHA":0.6,"EZET":0.6,"YETH":0.6,"ETU":0.6,"FETH":0.6,"QETH":0.6,"TETH":0.6,"ETCO":0.6,"ESK":0.6,"BTF":0.6,"ETHI":0.6,"ETHW":0.6},"content_text":"Trusted Editorial content, reviewed by leading industry experts and seasoned editors. Ad Disclosure\n\nBlockchain tracking firm Arkham Intelligence has labeled a set of suspicious wallets as “THORChain Exploiter” addresses, with one Bitcoin-linked wallet holding close to 36.85 BTC — worth roughly $3 million — and a separate Ethereum wallet carrying around 216 ETH. The funds are sitting there, visible on-chain, linked to two addresses that security researchers have already flagged publicly.\nRelated Reading: XRP ETF Accumulation Pushes Marex Group Among Top Holders\nWho Found It First\nThe person who spotted the attack before anyone else did was on-chain investigator ZachXBT. He reported suspicious movement tied to THORChain’s router infrastructure, describing how attackers shifted roughly $7.2 million in assets — including USDT, USDC, and wrapped Bitcoin — across several blockchains before converting them into ETH.\n\n\n\n\n\n\nHis initial estimate of losses above $7.4 million was later revised upward. The total stolen, according to ZachXBT, may now exceed $10 million.\n\nCan tell because they did not check the numbers themselves / chains listed.\nI finished accounting again now and it looks to be $10M+ stolen at least.\n— ZachXBT (@zachxbt) May 15, 2026\nTHORChain is a cross-chain trading protocol that lets users swap crypto assets across different blockchains without relying on a centralized exchange. That design also means its infrastructure touches multiple networks at once — and in this case, that became a vulnerability. The attack hit Bitcoin, Ethereum, BNB Chain, and Base simultaneously.\n\n\n\n\n\n\n\n\n\n\n\n\nSecurity firm PeckShield independently confirmed the breach. Based on their estimates, attackers walked away with around 36.75 BTC worth close to $3 million, along with roughly $7 million more pulled from the Ethereum, BNB Chain, and Base ecosystems.\nBTCUSD now trading at $77,926. Chart: TradingView\nMarkets React, Team Goes Quiet\nRUNE, THORChain’s native token, dropped close to 14% in the hours following news of the breach, sliding toward the $0.50 mark as traders moved to cut their exposure. The price drop was fast. The official response was not.\n\n\n\n\n\n\n\n\n\n\n\n\nAs of reporting, THORChain had not issued a public statement explaining the scope of the exploit or what steps were being taken to address it.\nThat silence has added to the anxiety in the market. The protocol survived earlier security incidents by tapping into treasury reserves and recovery mechanisms, but without clarity from the team, it is difficult to know whether a similar path is possible this time.\nA Pattern That Keeps Repeating\nCross-chain infrastructure has repeatedly been the site of major losses in decentralized finance. Bridges and routing systems that connect different blockchains require complex code — and complex code creates more opportunities for something to go wrong. The THORChain attack fits that pattern.\nRelated Reading: Crypto Industry Watches As Poland Advances Long-Delayed Regulatory Bill\nThe stolen assets remain in the flagged wallets for now. Whether they stay there is another question.\nFeatured image from Unsplash, chart from TradingView\n\n\n\nEditorial Process for bitcoinist is centered on delivering thoroughly researched, accurate, and unbiased content. We uphold strict sourcing standards, and each page undergoes diligent review by our team of top technology experts and seasoned editors. This process ensures the integrity, relevance, and value of our content for our readers.","kind":"highlight","is_publish_news":true,"is_publish_highlight":false,"is_publish_live":false,"is_publish_wemedia":null,"editions":null,"column":"","sentiment":"-1","news_tag":"","news_rank":0,"isVideo":false,"video":null,"symbols":[],"gpt_button":0,"need_auth":false,"need_login_tip":false,"code":"91000000","status":"200"},"commentList":[],"isCommentEnd":true,"newsSizeData":{"likeSize":0,"commentSize":0,"repostSize":0,"favoriteSize":0,"likeStatus":false,"favoriteStatus":false},"APP":{"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","isDev":false,"isTTM":true,"tenantId":"TBGLOBAL","deviceId":"web-server-community-laohu8-v3","version":"4.42.2","shortVersion":"4.42.2","platform":"web","vendor":"web","appName":"ttm","isIOS":false,"isAndroid":false,"isTiger":false,"isTHS":false,"isWeiXin":false,"isWeiXinMini":false,"isWeiBo":false,"isQQ":false,"isBaiduSwan":false,"isBaiduBox":false,"isDingTalk":false,"isToutiao":false,"isOnePlus":false,"isHuaWei":false,"isXiaomi":false,"isXiaomiWebView":false,"isOppo":false,"isVivo":false,"isSamsung":false,"isMobile":false},"href":"/m/news/2636099799","isCrawlerRequest":true}