Just a temperature probe: IF we start crowdfunding/bail out campaign for @THORChain like DeFi United had been risen for ethereum:0x7fc66500c84a76ad7e9c93437bfc5ac33e2ddae9 - will YOU participate? Comment, how do you see this:
The last remaining THORChain node was thrown into a volcano.
Three days later the volcano was facilitating cross-chain swaps and the word “onwards” appeared in the sky above.
$RUNE ⚡️🌋
I suddenly felt a strong urge to buy a Claude Max for $200 and spend the weekend analyzing the code in DeFi projects.
Let's crack all DeFi together. Buy $RUNE on all 'raised' funds.
⚡This Saturday on the THORChain Podcast | Community Member Spotlight.
Goose from @zephyr_org joins @KentonC137 and @patriotsounds live at 10AM EDT / 2PM UTC.
Zephyr Protocol is a privacy-first, over-collateralized stablecoin that merges Monero's untraceable technology with the Djed Protocol to create a stable yet fully private digital currency.
Jump on stage and ask your questions live: https://t.co/AUD5BPli7X
Guy with access to a $200/mo Claude Max and a spare weekend: "omg I found a P0, you owe me 10% of your TVL or else"
Yeah sure buddy, how about you share your prompt, and we'll refund you your time and token costs with a 100% premium.
(aka ~$2000)
What happened to responsible disclosure? This industry starting to become pathetic.
🍻 Cheers to the THORChain devs, THORSec team, node operators, and everyone working around the clock to bring the DEX of DEXes back online.
While others talk, they are auditing, patching, testing, reviewing, and making sure the network returns stronger than before. 💪
This hasn’t been an easy few weeks, but watching the community, builders, and security teams unite behind a common goal has been incredible.
No shortcuts. No rushed fixes. Just relentless work to protect the future of permissionless cross-chain swaps.
The DEX of DEXes is coming back. And when it does, it will be stronger, more resilient, and more battle-tested than ever. ⚔️
Thank you to every builder burning the midnight oil for THORChain. 🍻🟠 #THORChain $RUNE #DeFi
I BELIEVE Dynosauur will return the stolen @THORChain funds and go down as one of the most legendary whitehats in crypto history. ⚔️
The Verus Bridge exploiter just returned 4,052 $ETH ($8.5M) from the $11.58M exploit and kept 25% (~1,350 ETH / $2.8M) as bounty.
That changed the entire narrative overnight.
And honestly, after exposing such a critical weakness in one of the hardest cryptography and cross-chain systems ever built, even a 20-30% bounty feels fair to me.
The point has already been made.
The best minds in cryptography are now reviewing GG20, vault infrastructure, DKLS upgrades and every possible security path forward. THORChain will evolve and become even stronger from this.
Now there is a chance to turn this into a legendary moment for decentralized infrastructure instead of just another exploit story. 🍷
Return the funds.
Take the bounty.
Become the REAL Thorchad that helped make permissionless finance stronger for all the anons around the world.
Spread this message chads 👇
@Raynalytics@KentonC137@Patriotsounds@FelisNorwegicus@therunetard@RunemirQi@Fakk2
THORChain Incident Update #4
Following the events of May 15th, the community has been hard at work defining a path forward. ADR028 is now published and a vote is open for Node Operators.
🔹 The Recovery Plan 🔹
The protocol will absorb the loss first through Protocol-Owned Liquidity and the remainder is spread across synth holders (The exact split between the two is still being evaluated).
By doing so, POL will be reduced to zero. The ADR proposes to redirect a portion of system income to replenish it over time.
No new RUNE is minted, no RUNE is sold, and no holder is diluted.
🔹 The Technical Decisions 🔹
GG20 is kept in place for now, patched and upgraded. Trading resumes only after the vulnerability is patched and a successful churn has occurred.
A slower, more security-conscious release cadence is also called for going forward.
🔹 The Slashing 🔹
Innocent nodes that end up being in the same vault as the attacker are protected. The attacker's node is slashed in full.
The recovered RUNE is paired with whatever assets can be recovered from the affected vault, and any surplus RUNE is burned.
🔹 The White Hat Offer 🔹
The attacker is offered a bounty to return the funds. If funds are returned partially, the recovery plan rolls back proportionally.
🔹 Protocol Neutrality 🔹
THORChain remains neutral and permissionless. The attacker's swaps will not be censored once trading resumes.
Node Operators are now voting on the overall direction and principles of this proposal. The figures in the ADR are indicative at this stage and will be adjusted later, notably via Mimir.
The goal is to restart the network as soon as possible. A yes vote is a green light for developers to continue building in that direction.
Full details of ADR028
https://t.co/l41nQAkf1k
For those who want to understand the full context of what happened, this article is for you: https://t.co/FPpl37vYxR
Stronger and cleaner version 👇
There is no other blockchain in the world like @THORChain.
Incident Update #4 is live.
ADR-028 is on the table.
Node Operators are voting.
The Recovery Plan is brutally clear 👇
→ POL absorbs the loss first
→ Synth holders take what remains
→ No new $RUNE minted
→ No holder dilution
→ No $RUNE sold to cover losses
→ Attacker slashed in full
→ Recovered $RUNE paired with vault assets
→ Any surplus burned 🔥
→ Innocent nodes protected
→ White hat bounty remains open
→ Protocol neutrality stays intact
Return the funds, and the plan rolls back proportionally.
But here is the most important part:
No bailout.
No censorship.
No hidden games.
No money printer.
Just a transparent protocol taking the hit, protecting the network, and moving forward.
This is why @THORChain is different.
The chain was tested.
The community stayed.
The vote decides the restart.
Crypto needs more of this. ⚡
Incident Update #4 is live and the ADR-028 proposal is on the table
Here’s everything you need to know about the @THORChain Recovery Plan 👇
→ POL absorbs the loss first. Synth holders take what's left
→ No new RUNE minted. No holder diluted. No RUNE sold to cover anything
→ Attacker slashed in full. Recovered RUNE paired with vault assets, surplus burned.
→ Innocent nodes protected
→ White hat bounty on the table. Return the funds, the plan rolls back proportionally.
→ Protocol neutrality holds. Attacker's swaps won't be censored once trading resumes
Node Operators vote now. Yes = green light to restart
No mint. No bailout. No censorship. Full transparency
Onwards⚡
Another hack. Another “internal wallet.” Another few hundred thousand gone. 🤯
This time it’s @Polymarket — a platform processing billions in prediction market volume.
166 transactions.
5,000 POL drained every 30 seconds.
~$600K extracted on pure autopilot. 💀
No sophisticated smart contract exploit.
No flash loan attack.
No insane 0-day.
Just a leaked private key tied to an old ops wallet.
Crypto keeps proving the same thing over and over again:
The final boss is still operational security. ⚠️
You can build billion-dollar protocols with advanced math and complex infrastructure… but one weak key management setup can still nuke everything overnight.
This is why the lessons @THORChain is going through right now matter for the entire industry.
The protocols that survive attacks, adapt, and harden their architecture become the strongest systems in crypto. 🛡️
🚨 BREAKING: The THORChain exploit just exposed something much bigger than THORChain itself.
GG20 cryptography is NOT some niche THORChain-only system.
The same family of threshold ECDSA cryptography has been used across major crypto infrastructure including:
• THORChain
• Binance tss-lib
• Coinbase Developer Platform
• ZenGo
• Fireblocks
• OKX Wallet
• Particle Network
This is why the entire industry is watching the THORChain situation closely.
GG20 and threshold ECDSA have been considered some of the most advanced cryptographic systems in crypto infrastructure.
But ECDSA MPC is notoriously difficult.
Multiple CVEs and vulnerabilities have already been discovered over the years:
• TSSHOCK
• CVE-2023-33241
• Progressive key leakage issues
• Malicious participant extraction vectors
THORChain may simply be the first protocol large enough and decentralized enough to publicly stress-test this architecture under real hostile conditions. ⚠️
The war against decentralized cross-chain infrastructure just entered a new phase.
$RUNE #THORChain #Crypto #DeFi #XMR
After THORChain, now #RetoSwap too.
Another attack. Another reminder.
Reports say around 7,000 $XMR (~$2.7M) was stolen. Meanwhile the industry still pretends attacks against privacy and decentralized infrastructure are “just coincidence.”
They are not.
The war against #XMR, privacy and permissionless systems is very real.
And let’s not forget the bigger picture:
🚨 Ronin Bridge — ~$625M hacked
🚨 Poly Network — ~$611M hacked
🚨 BNB Bridge — ~$570M hacked
🚨 Wormhole — ~$325M hacked
🚨 Nomad — ~$190M hacked
Billions have been lost across crypto infrastructure.
That is exactly why THORChain needs to survive.
Not only for $RUNE holders, but for the entire industry.
Every exploit forces better architecture, stronger security models, better decentralization and more battle-tested systems.
The easy path is to quit after attacks.
The important path is to evolve and keep building.
Privacy, self-custody and decentralized cross-chain liquidity are too important to disappear.
And THORChain will help push the solutions forward. 🛡️🔥
#THORChain #RUNE #Monero #XMR