Version

Future

THORChain

Read

Four

<p>THORChain has moved into the next phase of its recovery from the May 15 vault exploit.&nbsp;</p>
<div id="cn-block-summary-block_d96d02fd16794f05d870a88c8091363e" class="cn-block-summary">
 <div class="cn-block-summary__nav tabs"><span>Summary</span>
 </div>
 <div class="cn-block-summary__content">
  <ul>
   <li>Validators must approve v3.19.0 before THORChain begins its staged restart and fully restores network services.</li>
   <li>The upgrade adds compromised-vault quarantine and temporary keyshare checks before signing resumes across the network.</li>
   <li>ADR-028 applies the recovery plan without minting new RUNE or diluting existing token holders further.</li>
  </ul>
 </div>
</div>
<p>Validators are now reviewing version 3.19.0, which combines security patches with the ADR-028 loss-recovery plan.</p>
<p>The release also introduces a mechanism that can quarantine a compromised vault. THORChain said this would stop an affected vault from processing transactions while keeping its activity visible to the network.</p>
<p>You might also like: <a href="https://crypto.news/thorchain-approves-adr028-as-rune-holders-await-network-restart/" rel="noopener noreferrer nofollow"> THORChain approves ADR028 as RUNE holders await network restart </a></p>
<h2 class="wp-block-heading" id="strong-validators-review-thorchain-v3-19-0-strong"><strong>Validators review THORChain v3.19.0</strong></h2>
<p>“The next major step in the recovery process is now underway,” THORChain <a href="https://x.com/THORChain/status/2064056165261312284?s=20" rel="noopener noreferrer nofollow">said</a> in its sixth incident update. Validators must vote to approve v3.19.0 before the network can begin the staged upgrade.</p>
<figure class="wp-block-embed is-type-rich is-provider-x wp-block-embed-x">
 <div class="wp-block-embed__wrapper">
  <blockquote class="twitter-tweet">
   <p>THORChain Incident Update #6<br><br>The next major step in the recovery process is now underway. Validators are being asked to review, approve, and prepare for the v3.19.0 upgrade, which contains the TSS security patches and ADR028 implementation designed to address the economic impact…</p>— THORChain (@THORChain) <a href="https://x.com/THORChain/status/2064056165261312284?ref_src=twsrc%5Etfw" rel="noopener noreferrer nofollow">June 8, 2026</a>
  </blockquote>
 </div>
</figure>
<p>The release contains patches for the threshold signature system used to control THORChain vaults. It also implements ADR-028, the governance plan approved after the exploit. The protocol said the upgrade would move the network closer to restoring normal operations.</p>
<p>Version 3.19.0 includes a new Compromised Vault Mimir setting. Once enabled, the setting will isolate the drained vault from transaction processing without removing it from network monitoring.</p>
<h2 class="wp-block-heading" id="strong-keyshare-checks-come-before-signing-resumes-strong"><strong>Keyshare checks come before signing resumes</strong></h2>
<p>THORChain plans to validate the ADR-028 data migration after validators complete the upgrade. Every node must then verify the integrity of its keyshares through a temporary protocol called keyverify.</p>
<p>Keyshares allow validators to sign vault transactions together without one operator holding the full private key. The added check aims to confirm that the remaining shares are intact before signing restarts.</p>
<p>After those checks, validators will unhalt signing and start a churn. Churning replaces the active validator set and transfers assets into newly generated vaults. The network will wait for that process to finish before restoring other services.</p>
<p>Secured and Trade assets will return first. Liquidity-provider actions will follow, while trading will resume at the end of the 11-step process. Each stage depends on the previous checks completing successfully.</p>
<h2 class="wp-block-heading" id="strong-adr-028-covers-losses-without-new-rune-strong"><strong>ADR-028 covers losses without new RUNE</strong></h2>
<p>As previously <a href="https://crypto.news/thorchain-approves-adr028-as-rune-holders-await-network-restart/" rel="noopener noreferrer nofollow">reported</a> by crypto.news, THORChain validators approved ADR-028 in May. The plan uses protocol-owned liquidity to absorb losses before allocating any remaining shortfall across synthetic asset holders.</p>
<p>The framework does not mint or sell new RUNE. It also avoids direct dilution for existing holders. Future system income will help rebuild protocol-owned liquidity after the restart.</p>
<p>THORChain also activated a bounty window for the attacker and approved the full slashing of the linked node. The protocol said innocent nodes that shared the affected vault would remain protected.</p>
<h2 class="wp-block-heading" id="strong-full-restart-still-depends-on-validators-strong"><strong>Full restart still depends on validators</strong></h2>
<p>The May 15 exploit <a href="https://crypto.news/zachxbt-warns-thorchain-losses-may-top-10m-after-halt/" rel="noopener noreferrer nofollow">drained about $10.7 million</a> from one of THORChain’s five vaults. THORChain’s report said a newly added node exploited a weakness in the GG20 threshold signature implementation. Four other vaults remained unaffected.</p>
<p>Automatic solvency checks detected the imbalance and halted signing within minutes. Node operators later paused trading, chain observation and churning while developers investigated the attack.</p>
<p>Validator approval of v3.19.0 would begin the final technical sequence, but it would not restore every service at once. THORChain will reopen signing, asset functions, liquidity actions and trading in stages after completing the vault, migration, keyshare and churn checks.</p>
<p>Read more: <a href="https://crypto.news/cardano-can-run-the-world-with-4-pillars-charles-hoskinson-says/" rel="noopener noreferrer nofollow"> Cardano can ‘run the world’ with 4 pillars, Charles Hoskinson says </a></p>

THORChain sets 11-step restart plan after $10.7M hack

Table of Contents

crypto.news

Other articles published on Jun 9, 2026

Join our free newsletter for daily crypto updates!