{"id":32766,"date":"2026-06-23T11:49:32","date_gmt":"2026-06-23T11:49:32","guid":{"rendered":"https:\/\/bitunikey.com\/news\/thorchain-trading-resumes-after-10-7m-exploit-and-month-long-halt\/"},"modified":"2026-06-23T11:49:40","modified_gmt":"2026-06-23T11:49:40","slug":"thorchain-trading-resumes-after-10-7m-exploit-and-month-long-halt","status":"publish","type":"post","link":"https:\/\/bitunikey.com\/news\/thorchain-trading-resumes-after-10-7m-exploit-and-month-long-halt\/","title":{"rendered":"THORChain trading resumes after $10.7m exploit and month-long halt"},"content":{"rendered":"<p><\/p>\n<div class=\"post-detail__content blocks\">\n<p class=\"is-style-lead\">\u201cTrading is live again on THORChain,\u201d the protocol said in a June 23 X post.\u00a0<\/p>\n<div id=\"cn-block-summary-block_2acdad0b1a02ff507feda33a3a58096b\" class=\"cn-block-summary\">\n<div class=\"cn-block-summary__nav tabs\">\n        <span class=\"tabs__item is-selected\">Summary<\/span>\n    <\/div>\n<div class=\"cn-block-summary__content\">\n<ul class=\"wp-block-list\">\n<li>THORChain resumed trading after more than a month offline following a $10.7 million vault exploit.<\/li>\n<li>crypto.news shows RUNE near $0.419, with modest weekly gains despite slight daily losses overall.<\/li>\n<li>New vault checks, KeyVerify upgrades and planned XMR swaps now shape THORChain\u2019s recovery path ahead.<\/li>\n<\/ul><\/div>\n<\/div>\n<p><!-- .cn-block-summary --><\/p>\n<p>The restart brings back swaps, signing, churning, secured and trade assets, and liquidity provider actions after more than a month offline.<\/p>\n<p>The network halted activity after a May 15 exploit that drained about $10.7 million from one vault. THORChain <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/x.com\/THORChain\/status\/2069313644605673545\" target=\"_blank\" rel=\"nofollow\">said<\/a> the restart was not rushed and that teams verified vaults, checked keyshares and moved through the recovery plan with security as the main focus.<\/p>\n<figure class=\"wp-block-embed is-type-rich is-provider-x wp-block-embed-x\">\n<div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"twitter-tweet\" data-width=\"550\" data-dnt=\"true\">\n<p lang=\"en\" dir=\"ltr\">Trading is live again on THORChain.<\/p>\n<p>After more than a month offline, the network is fully back. Signing, churning, secured and trade assets, LP actions, and swaps are all up and running. The world&#8217;s leading Bitcoin DEX is open for business once again.<\/p>\n<p>This recovery was never\u2026<\/p>\n<p>\u2014 THORChain (@THORChain) <a rel=\"nofollow\" target=\"_blank\" rel=\"nofollow\" href=\"https:\/\/x.com\/THORChain\/status\/2069313644605673545?ref_src=twsrc%5Etfw\">June 23, 2026<\/a><\/p><\/blockquote>\n<\/div>\n<\/figure>\n<p>crypto.news market data shows THORChain traded at $0.419456 on June 23. RUNE was down 0.2% over 24 hours, up 2% over seven days, and had $16.29 million in daily volume.<\/p>\n<p>    <!-- .cn-block-related-link --><\/p>\n<h2 class=\"wp-block-heading\"><strong>Vault migration closes old recovery step<\/strong><\/h2>\n<p>\u201cEvery vault verified, every keyshare checked,\u201d THORChain said in its restart post. The statement points to the main technical work behind the return of trading.<\/p>\n<p>The protocol said earlier that most vaults had been verified through KeyVerify and that remaining legacy vaults were retired through a migration to a new vault set. THORChain also said every node\u2019s keyshare had been checked before the restart moved forward.<\/p>\n<p>As previously reported by crypto.news, the staged plan required validators to approve v3.19.0 before normal services could return. The upgrade added compromised-vault quarantine, keyshare checks and recovery logic tied to ADR028.<\/p>\n<h2 class=\"wp-block-heading\"><strong>GG20 flaw drove the shutdown<\/strong><\/h2>\n<p>The May exploit came from a weakness in THORChain\u2019s GG20 threshold signature scheme. THORChain\u2019s <a rel=\"nofollow\" target=\"_blank\" href=\"https:\/\/blog.thorchain.org\/thorchain-exploit-report-1\" target=\"_blank\" rel=\"nofollow\">exploit report<\/a> said a newly churned malicious node operator reconstructed a full private key through progressive key material leakage.<\/p>\n<p>The attacker drained one vault, while the remaining four vaults were not affected. THORChain said automatic solvency checks detected the imbalance within minutes and halted signing and trading across several chains.<\/p>\n<p>crypto.news earlier reported that THORChain faced backlash after proposing to keep a patched version of GG20 instead of replacing it immediately. The protocol said the recovery path would patch the flaw first, while longer-term cryptographic changes remained under review.<\/p>\n<h2 class=\"wp-block-heading\"><strong>XMR and ZEC swaps enter pipeline<\/strong><\/h2>\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"is-style-default\">\u201cXMR is coming,\u201d THORChain said. <\/p>\n<\/blockquote>\n<p>The protocol added that native Monero swaps are already working end to end in testing, with a live launch on the horizon.<\/p>\n<p>THORChain also said Zcash would follow, while dynamic fees and deeper liquidity are planned. Earlier reports said ZEC support could arrive within two weeks of the restart, with Bittensor support expected later after the network returns to normal operations.<\/p>\n<p>The restart gives THORChain a chance to rebuild trading activity after the exploit, but the next test will be operational stability. Traders will watch whether swaps remain smooth, vault security holds and liquidity returns after the month-long pause.<\/p>\n<p>For RUNE holders, the recovery comes with only mild price movement so far. The token remains far below its all-time high, but it has avoided a sharp selloff on the restart day. The protocol\u2019s next updates on Monero, Zcash and fee changes may shape how users return to the cross-chain trading network.<\/p>\n<p>    <!-- .cn-block-related-link --><\/p><\/div>\n","protected":false},"excerpt":{"rendered":"<p>\u201cTrading is live again on THORChain,\u201d the protocol said in a June 23 X post.\u00a0 Summary THORChain resumed trading after more than a month offline following a $10.7 million vault&hellip;<\/p>\n","protected":false},"author":1,"featured_media":29835,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-32766","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cryptocurrency"],"_links":{"self":[{"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/posts\/32766","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/comments?post=32766"}],"version-history":[{"count":1,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/posts\/32766\/revisions"}],"predecessor-version":[{"id":32767,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/posts\/32766\/revisions\/32767"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/media\/29835"}],"wp:attachment":[{"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/media?parent=32766"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/categories?post=32766"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bitunikey.com\/news\/wp-json\/wp\/v2\/tags?post=32766"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}