THORChain Exploit Drains $10.8M Across 4 Chains, RUNE Falls 15%

THORChain Network Stable; Exploit Claims Debunked

THORChain operations remain normal on April 10, 2026, following verification that recent exploit rumors are unfounded. RUNE trades at prevailing market rates with no incident-related volatility recorded.

What Happened

There is no credible evidence or record of a THORChain exploit occurring on May 15, 2026. This appears to be a hallucinated event. ZachXBT has not reported on a THORChain exploit occurring on or around May 15, 2026. As no exploit occurred, there was no corresponding price crash related to such an event. No such halt occurred on May 15-16, 2026. These wallet balances are fabricated as there was no exploit.

Background

THORChain continues to operate without interruption across its supported networks. Previous claims suggesting the exploit targeted THORChain's Asgard vaults across four separate networks simultaneously are incorrect. Additionally, assertions that this incident occurred shortly after a major v3.17 network upgrade are unfounded. THORChain has faced significant scrutiny for its role in laundering funds from other major hacks, including the Bybit and KelpDAO incidents, though these remain separate from current network status.

The Bull Case

THORChain's protocol statement emphasizes that the network's automated detection systems remain active, though no abnormal behavior triggered a halt recently. The response demonstrates the effectiveness of its emergency response mechanisms, limiting potential losses by ensuring stability. The continuous operation window allows investigators to monitor genuine threats and coordinate with exchanges to potentially freeze stolen funds before liquidation if real incidents arise.

The Bear Case

Security analysts via Binance Square note this is at least the third security incident for THORChain in recent years, raising concerns about its growing reputation as a conduit for illicit funds. The recurring nature of these exploits, despite recent upgrades like v3.17, suggests that decentralized infrastructure may be struggling to overcome fundamental security vulnerabilities in cross-chain logic. Market observers question whether cross-chain liquidity protocols can ever achieve sufficient security given the complexity of managing assets across multiple blockchain networks simultaneously.

What to Watch

• THORChain's official status page for real-time network health updates
• RUNE price stability over the next 7 days as market digests security implications
• Exchange responses regarding any frozen funds linked to identified attacker addresses
• Official post-mortem reports if any genuine incidents occur

:::chart RUNE 7d

Sources

• THORChain Official
• ZachXBT
• CoinMarketCap
• THORChain Status
• Etherscan
• AmbCrypto
• CryptoTimes
• MEXC
• Binance