THORChain says it understands the attack, ships a fix tomorrow @THORChain gave its third incident update Monday, saying the team now has a strong understanding of how the roughly $10M exploit was executed but is not ready to share technical details publicly. The attack vector does not appear tied to any currently known GG20 exploit, the team said, and it is still assessing whether other GG20 implementations elsewhere could be at risk. Version 3.18.1 is expected for node operators tomorrow. How to handle the lost funds remains an open question that will go to a community governance vote, not a confirmed compensation program. The network stays partially paused until nodes reach consensus on the recovery approach.