{"id":93012,"date":"2026-05-17T03:01:32","date_gmt":"2026-05-17T03:01:32","guid":{"rendered":"https:\/\/dogewisperer.com\/?p=93012"},"modified":"2026-05-17T03:01:32","modified_gmt":"2026-05-17T03:01:32","slug":"10m-gone-thorchain-exploit-triggers-security-fears-across-defi","status":"publish","type":"post","link":"https:\/\/dogewisperer.com\/?p=93012","title":{"rendered":"$10M Gone: Thorchain Exploit Triggers Security Fears Across DeFi"},"content":{"rendered":"
\n

Blockchain tracking firm Arkham<\/a> Intelligence has labeled a set of suspicious wallets as \u201cTHORChain Exploiter\u201d addresses, with one Bitcoin-linked wallet holding close to 36.85 BTC \u2014 worth roughly $3 million \u2014 and a separate Ethereum wallet carrying around 216 ETH. The funds are sitting there, visible on-chain, linked to two addresses that security researchers have already flagged publicly.<\/p>\n

Who Found It First<\/h2>\n

The person who spotted<\/a> the attack before anyone else did was on-chain investigator ZachXBT. He reported suspicious movement tied to THORChain\u2019s router infrastructure, describing how attackers shifted roughly $7.2 million in assets \u2014 including USDT, USDC, and wrapped Bitcoin \u2014 across several blockchains before converting them into ETH.<\/p>\n

His initial estimate of losses above $7.4 million was later revised upward. The total stolen<\/a>, according to ZachXBT, may now exceed $10 million.<\/p>\n

\n

Can tell because they did not check the numbers themselves \/ chains listed.<\/p>\n

I finished accounting again now and it looks to be $10M+ stolen at least.<\/p>\n

\u2014 ZachXBT (@zachxbt) May 15, 2026<\/a><\/p>\n<\/blockquote>\n

THORChain is a cross-chain trading protocol that lets users swap crypto assets across different blockchains without relying on a centralized exchange. That design also means its infrastructure touches multiple networks at once \u2014 and in this case, that became a vulnerability. The attack hit Bitcoin, Ethereum, BNB Chain, and Base simultaneously.<\/p>\n

Security firm PeckShield independently confirmed the breach. Based on their estimates, attackers<\/a> walked away with around 36.75 BTC worth close to $3 million, along with roughly $7 million more pulled from the Ethereum, BNB Chain, and Base ecosystems.<\/p>\n

<\/p>\n

Markets React, Team Goes Quiet<\/h2>\n

RUNE, THORChain\u2019s native token, dropped close to 14% in the hours following news of the breach, sliding toward the $0.50 mark as traders moved to cut their exposure. The price drop was fast. The official response was not.<\/p>\n

As of reporting, THORChain had not issued a public statement explaining the scope of the exploit<\/a> or what steps were being taken to address it.<\/p>\n

That silence has added to the anxiety in the market. The protocol survived earlier security incidents by tapping into treasury reserves and recovery mechanisms, but without clarity from the team, it is difficult to know whether a similar path is possible this time.<\/p>\n

A Pattern That Keeps Repeating<\/p>\n

Cross-chain infrastructure has repeatedly been the site of major losses in decentralized finance. Bridges and routing systems that connect different blockchains require complex code \u2014 and complex code creates more opportunities for something to go wrong. The THORChain attack fits that pattern.<\/p>\n

The stolen assets remain in the flagged wallets for now. Whether they stay there is another question.<\/p>\n

Featured image from Unsplash, chart from TradingView<\/em><\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

Blockchain tracking firm Arkham Intelligence has labeled a set of suspicious wallets as \u201cTHORChain Exploiter\u201d addresses, with one Bitcoin-linked wallet holding close to 36.85 BTC \u2014 worth roughly $3 million \u2014 and a separate Ethereum wallet carrying around 216 ETH. The funds are sitting there, visible on-chain, linked to two addresses that security researchers have […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"iawp_total_views":0,"footnotes":""},"categories":[2],"tags":[3,4,5],"class_list":["post-93012","post","type-post","status-publish","format-standard","hentry","category-news","tag-crypto","tag-doge","tag-news"],"_links":{"self":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts\/93012","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=93012"}],"version-history":[{"count":0,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=\/wp\/v2\/posts\/93012\/revisions"}],"wp:attachment":[{"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=93012"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=93012"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/dogewisperer.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=93012"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}