Thorchain Halts Trading After $10.8M Cross-Chain Exploit

Thorchain was exploited for approximately $10.8 million on Friday, May 15, 2026, affecting deployments across four different blockchains including Bitcoin, Ethereum, BSC, and Base. The protocol immediately halted all trading and signing operations in response to the attack.

The attacker's wallets currently hold roughly 3,443 ETH, 36.85 BTC, and 96.6 BNB according to on-chain investigators. Thorchain's native RUNE token dropped approximately 12% following disclosure of the exploit.

This incident highlights escalating security risks for cross-chain bridges and liquidity protocols. Since 2021, cross-chain infrastructure has suffered more than $2.8 billion in total thefts, making it one of the most targeted vectors in decentralized finance. [INTERNAL: DeFi security]

Notably, Thorchain has not yet released a post-mortem analysis explaining the specific attack vector used in this exploit. This lack of transparency underscores broader concerns about [INTERNAL: smart contract audits] and the speed at which protocols can respond to and communicate about security breaches.

Cross-chain liquidity protocols serve as critical infrastructure for decentralized finance, enabling assets to move between different blockchains. However, the complexity of these systems and their role as high-value targets continue to make them vulnerable to sophisticated attacks.

The incident is likely to renew discussions within the crypto community about security standards, incident response protocols, and the trade-offs between speed and safety in cross-chain design.

This is not financial advice.