{"id":97157,"date":"2026-05-16T14:42:00","date_gmt":"2026-05-16T11:42:00","guid":{"rendered":"https:\/\/forklog.com\/en\/?p=97157"},"modified":"2026-05-16T14:45:11","modified_gmt":"2026-05-16T11:45:11","slug":"thorchain-team-reveals-details-of-10-million-hack","status":"publish","type":"post","link":"https:\/\/forklog.com\/en\/thorchain-team-reveals-details-of-10-million-hack\/","title":{"rendered":"THORChain Team Reveals Details of $10 Million Hack"},"content":{"rendered":"<p>THORChain developers have confirmed a breach of the <a href=\"https:\/\/forklog.com\/en\/news\/what-are-cross-chain-bridges\">cross-chain<\/a> protocol <a href=\"https:\/\/forklog.com\/en\/news\/hackers-extract-10-million-from-thorchain\">amounting to $10 million<\/a> and denied the launch of a compensation program.<\/p>\n<blockquote class=\"twitter-tweet\" data-lang=\"en\">\n<p lang=\"en\" dir=\"ltr\">THORChain incident update #2 <br \/>We have become aware of multiple fake accounts and false information circulating regarding \u201crefunds\u201d, \u201cairdrops\u201d, compensation claims, and other alleged initiatives. <\/p>\n<p>To be absolutely clear: <br \/>\u2014 Initial findings indicate that no user funds were\u2026<\/p>\n<p>\u2014 THORChain (@THORChain) <a href=\"https:\/\/twitter.com\/THORChain\/status\/2055593187922587697?ref_src=twsrc%5Etfw\">May 16, 2026<\/a><\/p><\/blockquote>\n<p> <script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script>\u00a0<\/p>\n<p>According to PeckShield, the attacker stole 36.75 BTC and approximately $7 million in <a href=\"https:\/\/forklog.com\/en\/news\/what-is-the-ethereum-virtual-machine-evm\">EVM<\/a> tokens across the Ethereum, BNB Chain, and <a href=\"https:\/\/forklog.com\/en\/news\/what-is-base-coinbases-l2\">Base<\/a> networks.<\/p>\n<p>Following the incident, the THORChain team suspended the protocol&#8217;s operations. Trading options, liquidity pool operations, and other &#8220;sensitive&#8221; actions became unavailable.<\/p>\n<p>The main theory regarding the attack vector is that the perpetrator exploited a vulnerability in the GG20 TSS threshold signature scheme implementation, which allowed the leakage of confidential key information of the <a href=\"https:\/\/forklog.com\/en\/news\/what-is-a-multisignature-what-is-a-ring-signature\">multisig<\/a> vault participants. Over time, the hacker gathered enough data to reconstruct the private key and execute unauthorized outgoing transactions.<\/p>\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>\u201cThe team continues to work on a comprehensive recovery and network relaunch plan. Returning to trading and full functionality will likely take several days or longer, depending on the complexity of the chosen remediation path,\u201d the statement said.<\/p>\n<\/blockquote>\n<p>The developers assured that user funds were not affected by the incident. They noted the emergence of numerous resources offering compensation.<\/p>\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p>\u201cTHORChain is currently not conducting any refund, <a href=\"https:\/\/forklog.com\/en\/news\/what-is-a-cryptocurrency-airdrop\">airdrop<\/a>, or compensation programs. Any account claiming otherwise is impersonating us or spreading misinformation,\u201d the team emphasized.<\/p>\n<\/blockquote>\n<p>One portal, allegedly launched on behalf of the THORChain Foundation, offers to connect the affected wallet for compensation. According to the statement, the \u201crefund window\u201d will close in 21 days. Commentators <a href=\"https:\/\/x.com\/iceman00008\/status\/2055432576991637553\">highlight<\/a> that this is a scam and urge caution.<\/p>\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" src=\"https:\/\/forklog.com\/wp-content\/uploads\/img-0b13c6090be42040-4532756551044708.webp\" alt=\"image\" class=\"wp-image-280043\"\/><figcaption class=\"wp-element-caption\">Source: revoke-thorchain.org.<\/figcaption><\/figure>\n<p>Back in April, <a href=\"https:\/\/forklog.com\/en\/news\/april-sets-record-for-crypto-industry-hacks\">a record number of hacks<\/a> in the crypto industry were recorded in a single month. More than 20 incidents resulted in losses amounting to $651 million.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>THORChain developers have confirmed a breach of the cross-chain protocol amounting to $10 million and denied the launch of a compensation program.<\/p>\n","protected":false},"author":1,"featured_media":97158,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"select":"1","news_style_id":"1","cryptorium_level":"","_short_excerpt_text":"THORChain developers confirmed a $10 million breach, denying any compensation program.","creation_source":"","_metatest_mainpost_news_update":false,"footnotes":""},"categories":[3],"tags":[44,1750],"class_list":["post-97157","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news-and-analysis","tag-cybercrime","tag-thorchain"],"aioseo_notices":[],"amp_enabled":true,"views":"4","promo_type":"1","layout_type":"1","short_excerpt":"THORChain developers confirmed a $10 million breach, denying any compensation program.","is_update":"","_links":{"self":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/97157","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/comments?post=97157"}],"version-history":[{"count":1,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/97157\/revisions"}],"predecessor-version":[{"id":97159,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/posts\/97157\/revisions\/97159"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/media\/97158"}],"wp:attachment":[{"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/media?parent=97157"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/categories?post=97157"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/forklog.com\/en\/wp-json\/wp\/v2\/tags?post=97157"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}