THORChain Suffers $10.7 Million Theft Following Vault Compromise
Decentralized cryptocurrency platform THORChain has confirmed a $10.7 million theft following the compromise of one of its six operational vaults.
The decentralized cryptocurrency platform THORChain suffered a significant security breach on Friday morning, resulting in the theft of approximately $10.7 million in digital assets. The incident was first brought to public attention by blockchain security firm PeckShield and independent investigator ZachXBT, who identified unauthorized outflows of funds around 6 am EST The Record.
According to reports, the attackers successfully siphoned over 36 Bitcoin, valued at roughly $3 million, alongside an additional $7 million in various other cryptocurrencies The Record. THORChain confirmed the breach shortly thereafter, stating that the unauthorized activity originated from a compromise of one of its six operational vaults. The platform's automated security protocols detected the abnormal behavior and subsequently halted all signing activity, a move the company credited with preventing further outbound transactions and limiting the total loss The Record.
In its official statement, THORChain emphasized that while the protocol-owned funds were impacted, initial assessments suggest that user funds remain secure The Record. The Switzerland-based organization, which was founded in 2018, has launched an ongoing investigation into the mechanics of the vault compromise and is implementing additional security measures to prevent further unauthorized access The Record.
This incident follows a history of security challenges for the platform; last year, a THORChain founder reported a $1.2 million loss following an account compromise attributed to North Korean hackers The Record. The broader cryptocurrency sector has faced a turbulent 2026, characterized by a series of high-profile thefts. Recent months have seen multiple individual incidents resulting in losses between $26 million and $40 million, contributing to a total of over $200 million stolen from various platforms throughout the year The Record.
The frequency and scale of these attacks have prompted federal intervention. Last month, the U.S. Treasury Department announced a new initiative to share cyber threat intelligence directly with the cryptocurrency industry, a decision spurred by a massive $280 million theft from the Drift platform The Record. Despite these efforts, the threat landscape remains volatile, as evidenced by a separate, complex attack by alleged North Korean actors that resulted in the theft of $290 million from another platform just days after the Treasury's announcement The Record. With over $2 billion stolen across the industry in the previous year, the THORChain breach serves as another data point in a persistent trend of large-scale financial exploitation within the decentralized finance ecosystem The Record.