THORChain Suspends Trading After Massive Exploit Sends RUNE Tumbling Hard

The decentralized finance market faced another major security scare after THORChain temporarily halted trading and signing operations. This came after a suspected cross-chain exploit that reportedly drained more than $10 million in digital assets. The incident triggered panic selling across crypto markets. As a result, the protocol’s native token RUNE plunged nearly 12% within hours.

The exploit has quickly become one of the most-discussed crypto security stories of the week. This has raised fresh concerns about the risks posed by cross-chain liquidity protocols and decentralized swaps.

THORChain is widely known for enabling users to swap native cryptocurrencies like Bitcoin and Ethereum across multiple blockchains. This service does not require reliance on centralized exchanges or wrapped tokens. However, that same interoperability has now become the focus of an intense security investigation.

THORChain Pauses Operations After Suspicious Transactions

Blockchain security researchers first flagged unusual activity involving wallets connected to Bitcoin, Ethereum, BNB Chain, and Base. Investigators, including ZachXBT and PeckShield, reportedly traced millions of dollars in suspicious transactions tied to the protocol.

Following the alerts, THORChain validators activated emergency controls through the network’s governance system. Trading and signing activities were paused while node operators investigated the exploit and attempted to contain further losses.

According to early reports, stolen assets included thousands of ETH, Bitcoin holdings, and BNB-based funds spread across multiple chains. Some blockchain analytics platforms estimated the total damage at over $10.7 million.

The protocol has not yet released a complete technical breakdown of the exploit. However, the attack appears linked to vulnerabilities affecting cross-chain transaction infrastructure.

RUNE Price Crashes as Investors React

The market response was immediate and severe.

RUNE, THORChain’s native token, dropped sharply as fear spread throughout decentralized finance markets. The token fell from around $0.58 to nearly $0.50 before stabilizing slightly amid volatile trading. Data from crypto tracking platforms later showed losses exceeding 17% on a 24-hour basis.

Trading volume also surged as investors rushed to reduce exposure amid uncertainty surrounding the protocol’s security and recovery timeline.

The incident once again demonstrated how quickly market sentiment can shift in decentralized finance when security vulnerabilities emerge. Notably, cross-chain systems often face greater technical complexity because they interact with several blockchain ecosystems simultaneously. This increases the number of potential attack surfaces.

Why Cross-Chain Protocols Face Higher Security Risks

Cross-chain liquidity platforms like THORChain have become increasingly important in decentralized finance. This is because they allow users to transfer assets seamlessly between different blockchain networks.

However, security experts have repeatedly warned that interoperability remains one of crypto’s biggest technical challenges. Even academic research on atomic cross-chain swaps and decentralized exchange protocols has long highlighted the operational risks involved. Such risks arise when multiple chains and validator systems must coordinate transactions securely.

Unlike single-chain decentralized applications, cross-chain protocols must maintain synchronized operations across different consensus systems and smart contract environments. That added complexity can create more opportunities for exploits, bridge attacks, and validator vulnerabilities.

The THORChain incident now joins a growing list of high-profile decentralized finance exploits. These attacks have collectively cost the crypto industry billions of dollars over recent years.

What Happens Next for THORChain?

The immediate focus for THORChain developers and validators is containment and recovery.

Blockchain analysts are closely monitoring attacker wallets to see whether the stolen funds begin moving through mixers, exchanges, or additional bridge protocols. At the same time, investors are waiting for a detailed post-mortem report. This report should explain exactly how the exploit occurred and whether user funds remain at risk.

Despite the setback, THORChain continues to process significant trading activity within the decentralized finance ecosystem. Before the exploit, the platform was reportedly handling nearly $394 million in daily trading volume.

Still, the latest attack could create lasting reputational damage if the protocol fails to restore confidence quickly.

For now, the crypto market is watching closely as THORChain attempts to recover from one of its most serious security incidents to date.