Bridge Incident Registry
Bridge entity

THORChain

THORChain is a cross-chain liquidity network and native-asset exchange protocol. It is included because two ETH Router exploits in July 2021 caused a combined protocol insolvency of about $16 million, and a separate May 2026 GG20 TSS exploit drained approximately $10.7 million from an Asgard vault. Normal trading remained temporarily paused at the latest review.

paused reviewed current

Bridge facts

Canonical name
THORChain
Type
Interoperability Protocol
Status
Paused
Confidence
High
Primary chains
THORChain, Bitcoin, Ethereum, BNB Chain, Avalanche, Unknown
Primary assets
BTC, ETH, USDC, USDT, WBTC, DAI, Unknown
Operator
THORChain node operators and contributors
Ecosystem
THORChain
Launch date
Unknown
End date
Unknown
Terminal reason
Not applicable / unknown
Last reviewed
2026-06-15
Last verified
2026-06-15

Incident cases

  • THORChain 2026 GG20 TSS vault exploit2026-05-15

    In May 2026, a newly churned node operator exploited a vulnerability in THORChain's GG20 threshold-signature implementation, reconstructed a vault private key, and drained approximately $10.7 million from one Asgard vault across multiple chains.

    Exploit$10.7 million official estimate; more than $11 million later analytics estimateUnresolved

  • THORChain 2021 ETH Router exploit 22021-07-22

    A second July 2021 attack used a fake router and malicious refund memo to make Bifrost accept a fabricated deposit event, draining economically significant ERC-20 assets from THORChain's Ethereum-side liquidity.

    ExploitApproximately $8 millionFinal outcome known

  • THORChain 2021 ETH Router exploit 12021-07-15

    In July 2021, an attacker used a contract positioned in front of THORChain's ETH Router to make Bifrost report deposits that had not actually been received, ultimately draining ETH and contributing to protocol insolvency.

    Exploit$8 million official estimate; $5 million secondary estimateFinal outcome known

Evidence records

Official URL status

Official URL recorded as live: https://thorchain.org/