THORChain Suspends Transactions Amid Suspected $10M+ Crypto Theft

The cross-chain DeFi protocol THORChain has suspended trading after it was allegedly hit by a major multi-chain attack, resulting in the theft of over $10 million in cryptocurrency assets. Security researchers and on-chain investigation firms, such as PeckShield, reported numerous suspicious withdrawal events involving assets from Bitcoin, Ethereum, BNB Chain, and Base.

Early tracking data shows that the attacker allegedly stole approximately 36.75 bitcoins (worth around $3 million) and $7 million in cross-chain assets. The stolen funds for Bitcoin and Ethereum are linked to publicly visible wallet addresses on compatible networks.

After the incident, THORChain halted trading, likely to prevent further liquidity depletion or cascading attacks affecting interconnected liquidity pools. As THORChain is a critical infrastructure for decentralized cross-chain trading, this interruption may impact all related ecosystems, wallets, aggregators, and liquidity providers.

DeFi security has been under strain. Over the past few months, the industry has been plagued by exploit attacks, bridge breaches, governance vulnerabilities, and malware targeting wallet funds. Base liquidity If the underlying layer fails, interconnected DeFi systems can rapidly spread contagion, as recent attacks on major protocols have demonstrated.

Due to the integration of complex smart contracts, multiple consensus systems, bridge infrastructure, and liquidity management into a single environment, security experts frequently warn that they remain one of the most dangerous attack surfaces in cryptocurrency.

In addition, academic research has shown that when protocols lack robust security layers, DeFi’s composability, flash loans, and transaction ordering vulnerabilities create highly exploitable conditions.

Until the official post-incident investigation and security assessment report is released, anyone with assets linked to a THORChain-integrated wallet, router, or other device should exercise caution. Avoid using this protocol for liquidity pools, revoke unnecessary wallet approvals, closely monitor THORChain’s official channels, and avoid phishing links exploiting fear surrounding this incident.

Although the market widely believed several years ago that decentralization could eliminate risk entirely, this is not the case. DeFi still operates in an environment where a single vulnerability could instantly freeze billions of dollars in liquidity.