POPA ReconTHORChain Hit by $10.7M Exploit. 5 of 6 Vaults Survived
THORChain Hit by $10.7M Exploit. 5 of 6 Vaults Survived This attack was carefully prepared over weeks, not executed overnight. Chainalysis traced the attacker’s setup back to late April, when a linked wallet moved XMR through a privacy bridge, swapped into USDC, bridged to Ethereum, and bonded RUNE on THORChain to operate as a legitimate validator before executing the exploit. The attack targeted THORChain’s GG20 threshold signature scheme, where validators jointly sign transactions using split key shares. By exploiting a flaw in the implementation, the attacker gradually extracted enough k…
The excerpt is quoted from a public Telegram channel, which owns its text.