THORChain confirms $10M exploit, rolls out recovery portal for affected users

THORChain confirmed a $10 million exploit affecting 12,847 wallets across four blockchains and launched a recovery portal enabling users to revoke malicious approvals and claim refunds from a treasury-backed pool. The attack exploited a vulnerability in the GG20 threshold signature scheme, allowing attackers to reconstruct the vault's private key. Users have until June 4 to submit claims.
Key takeaways
- 1THORChain confirmed $10M exploit affecting 12,847 wallets across four blockchains; attackers stole 36.75 BTC and $7M in tokens.
- 2Recovery portal launched allowing affected users to revoke malicious approvals and claim refunds from treasury-backed pool by June 4 deadline.
- 3Attack exploited GG20 threshold signature scheme vulnerability, enabling attackers to reconstruct vault private key and authorize unauthorized transactions.
Coins in this story
Why it matters
This incident highlights critical security risks in DeFi protocols that Indian retail investors face when using cross-chain bridges and liquidity platforms. The availability of a recovery mechanism sets a precedent for protocol accountability, but the breach underscores the need for due diligence before engaging with emerging DeFi platforms.
Explore how RWA is shaping crypto markets — aggregated stories, leading coins, and weekly momentum.
Explore narrativeRelated stories

Sharplink CEO points out 3 catalysts for Ethereum's price to surge higher
The rest of the world is “really closely” watching the US CLARITY Act as the nation moves further away from the previous “hostile stance,” according to Sharplink’s chief....

US CLARITY Act brings ‘major spike of euphoria’ to Bitcoin: Santiment
The US Senate Banking Committee advanced the CLARITY Act in a bipartisan 15-9 vote, sparking Bitcoin euphoria on social media. BTC trades at $79,084, up 3.15% since May. While analysts see long-term bullish potential from regulatory clarity, Santiment warns markets typically move against crowd expectations, with a Fear & Greed Index score of 31 suggesting caution.

Bitcoin Depot filing casts doubt on company’s future amid lawsuits
Bitcoin Depot faces existential threats after accruing $20 million in legal judgments and reporting "substantial doubt" about continuing operations. The crypto ATM operator suffered an $80.7 million revenue decline amid tightening US regulations and state-level lawsuits. Stock tumbled 40% in five days. Canada also proposes banning crypto ATMs nationwide, threatening Depot's 220 Canadian machines and industry viability.