THORChain has restored full operations as of Tuesday morning, bringing signing, churning, swaps, and liquidity-provider actions back online. The restart follows a halt tied to a $10.7 million exploit that occurred in May.
Restart Announcement
The protocol's official account announced the restart just before 3 a.m. ET on Tuesday. All core network functions — including signing and churning, which handle block production and validator rotation — are now active. Users can once again swap assets across supported chains and add or remove liquidity from pools.
The May Exploit
The halt stemmed from a $10.7 million exploit that hit THORChain in May. The attacker exploited a vulnerability in the protocol's code, prompting the team to pause operations to contain the damage and investigate. Tuesday's restart signals that the vulnerability has been addressed, though the team has not released details of the fix or any recovery of funds.
THORChain is a cross-chain liquidity protocol that allows users to swap native assets without wrapping or centralized intermediaries. The exploit was one of several security incidents that have hit DeFi protocols this year, though the relatively quick return to full operations suggests the team has prioritized patching and security hardening.
With operations back, the protocol is now focused on normal activity. No further updates on the investigation or potential compensation for affected parties have been announced.
