THORChain halted all trading and signing activities after investigators flagged a suspected exploit that cut across multiple blockchains on Friday. Blockchain analyst ZachXBT identified activity suggesting the protocol was exploited on Bitcoin, Ethereum, BNB Smart Chain, and Base, with losses estimated above $10 million. That’s significant because THORChain’s core promise is native asset swaps between chains, so a vulnerability here doesn’t stay isolated to one network.
The response was immediate. THORChain stopped both trading and signing while the team examined the breach, using the same emergency controls its documentation describes for containing chain-specific or broader incidents. In a cross-chain system, that kind of halt is designed to stop damage from spreading while operators isolate what was hit.
Why this matters is simple: cross-chain convenience comes with concentrated infrastructure risk. If people use protocols like THORChain, they’re not just betting on the safety of Bitcoin or Ethereum themselves—they’re also trusting the bridge layer that connects them. This incident is a reminder that when that layer fails, the impact can reach multiple ecosystems at once.