THORChain Restores Operations Following Major Security Overhaul
THORChain has officially resumed full network operations after a six-week suspension triggered by a $10.7 million security exploit. By prioritizing structural integrity over a rapid restart, the decentralized exchange has successfully restored core services, including cross-chain swaps, node churn, and liquidity provider actions, signaling the end of one of the most challenging periods in the protocol’s history.
A Deliberate Path to Recovery
The decision to remain offline for over a month was a strategic choice by the THORChain team to ensure a comprehensive security audit. Following the breach, developers and engineers worked to verify every vault and key share before allowing any assets to move. This period of downtime allowed the project to investigate the underlying vulnerability, secure the remaining infrastructure, and coordinate with node operators and the Maya Protocol team to ensure the network's resilience upon its return.
Analyzing the $10.7 Million Exploit
The disruption originated from a flaw in the GG20 Threshold Signature Scheme (TSS), which allowed an attacker to reconstruct a private key for a single Asgard vault. By leveraging a newly churned validator, the attacker authorized unauthorized withdrawals before the protocol’s automated solvency monitoring could intervene. While the loss was significant, the immediate halt of trading and vault operations prevented further damage, and the subsequent recovery phase focused on deploying permanent security fixes to prevent similar exploits in the future.
Future Expansion and New Integrations
With the network now fully operational, THORChain is shifting its focus back to its growth roadmap and the introduction of new features. The protocol is currently conducting end-to-end testing for native Monero (XMR) swaps, which are expected to launch in the near future. Additionally, the project plans to integrate native Zcash support and implement dynamic fee structures, further enhancing liquidity and strengthening its infrastructure for decentralized cross-chain trading.
