Aave

Bifrost

THORChain

Read

<p><strong>THORChain suffered two back-to-back exploits targeting its ETH Router, resulting in approximately $8 million in losses and raising questions about cross-chain vulnerability in decentralized exchange infrastructure.</strong></p>
<h2 id="confirmed-damage-was-limited-to-ethereum-assets">Confirmed damage was limited to Ethereum assets</h2>
<p>THORChain's official post-mortem confirmed that the protocol experienced two sequential exploits on its ETH Router. The first attack drained roughly <a href="https://medium.com/thorchain/post-mortem-eth-router-exploits-1-2-and-premature-return-to-trading-incident-2908928c5fb" rel="noopener noreferrer nofollow">4,200 ETH</a>, while the second siphoned economically significant ERC-20 tokens including over 1.67 million USDC.</p>
<p>The protocol stated explicitly that no other chains or assets were affected by the realized exploit. THORChain committed to covering all liquidity provider losses through its treasury, later outlining a roughly $16 million insolvency recovery plan.</p>
<h2 id="why-reports-of-multi-chain-exposure-alarmed-the-market">Why reports of multi-chain exposure alarmed the market</h2>
<p>Despite the confirmed losses being confined to Ethereum, the attacker left a memo suggesting that BTC, BNB, and BEP-20 assets could also have been taken if the exploit had continued. According to unconfirmed reports, this indicated potential wider exposure across THORChain's cross-chain architecture, though no realized losses on those networks have been documented.</p>
<p>The distinction matters. THORChain's Bifrost component connects multiple blockchains through a single protocol layer. A vulnerability in how the ETH Router interacted with Bifrost raised concerns that similar attack paths could exist on other chain integrations, even if they were not exploited in this instance.</p>
<p>RUNE fell <a href="https://coincodex.com/article/11771/thorchain-suffers-second-exploit-in-july-as-whitehat-hacker-takes-8-million-worth-of-crypto" rel="noopener noreferrer nofollow">16.8% in 24 hours</a> and 43% over 30 days following the exploit news. The sell-off reflected broader unease about protocol security rather than just the immediate dollar losses.</p>
<figure>
 <div>
  <div>
   Market Snapshot
  </div>
  <div>
   Price: 0.51688 | 24h: -11.286420144051242
  </div>
 </div>
 <figcaption>
  Research-derived market snapshot prepared because no screenshot-ready supported platform URL was available.
 </figcaption>
</figure>
<p>The incident followed a pattern of DeFi security events that have tested user confidence across protocols. Similar concerns about cross-chain risk surfaced when <a rel="noopener noreferrer nofollow">Aave paused rsETH across multiple networks</a> earlier, highlighting how multi-chain architectures create interconnected risk surfaces.</p>
<p>For liquidity providers, the cross-chain dimension of THORChain's design means a single smart contract flaw can theoretically cascade. This dynamic differs from single-chain protocols where exploit exposure is naturally contained, much like how <a rel="noopener noreferrer nofollow">large institutional investments in crypto platforms</a> carry concentrated counterparty risk.</p>
<h2 id="recovery-steps-and-what-to-monitor">Recovery steps and what to monitor</h2>
<p>THORChain halted affected functionality immediately after the exploits were identified. The protocol pursued code audits and fixes before resuming operations, with treasury-backed remediation for affected LPs forming the core of its recovery plan.</p>
<p>The incident underscores why protocol-level insurance mechanisms and rapid halt capabilities matter for cross-chain infrastructure. As <a rel="noopener noreferrer nofollow">prediction markets</a> and other DeFi verticals expand across chains, the security lessons from THORChain's ETH Router exploits remain directly relevant.</p>
<p>Chain-specific impact assessments may still evolve as independent security firms complete their reviews. The crypto Fear &amp; Greed Index currently reads 43, reflecting a broader climate of caution that security incidents like this one reinforce.</p>
<p>Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.</p><a href="https://nftenex.com/?p=7781" rel="noopener noreferrer nofollow">Read original article on nftenex.com</a>

THORChain Hit by Reported Exploit Affecting Multiple Blockchains

Table of Contents

NFTENEX

Other articles published on May 15, 2026

Join our free newsletter for daily crypto updates!