Home
/
Security measures
/
Exchange safety
/

Chronicles of thorchain: a timeline of exploits and failures

Thorchain Under Fire | Security Issues Spark User Fury

By

James Williams

May 16, 2026, 12:32 PM

Edited By

Miyuki Tanaka

Updated

May 18, 2026, 01:05 PM

2 minutes reading time

A graphic showing key incidents and failures in Thorchain's history, emphasizing vulnerabilities over time.

In a significant blow to its reputation, Thorchain faces growing backlash after a series of security breaches, with six major hacks occurring over five years. Users express mounting frustration over a perceived lack of accountability and transparency in the platform's operations amid ongoing vulnerabilities.

Timeline of Exploits

Thorchain's security woes can be traced through a troubling timeline:

  1. Deliberate Flaw: Developers reportedly left a flaw in a TSS library, which was then exploited.

  2. Leaked Instructions: Allegedly, malicious parties received exploitable information from inside sources.

  3. Exploitation: The platform suffered significant breaches, prompting outrage.

  4. Operational Halt: The Dex suspended operations despite its decentralized branding.

  5. Backdoor Discovery: Developers quickly found the coding flaw they had left vulnerable.

  6. Rapid Fix: They rushed to correct the issue, even compensating influencers to promote their efforts.

  7. Funds Laundering: Some speculate that stolen funds were laundered back to the developers.

  8. User Loss: Users faced significant financial losses, while the platform continued as if nothing had happened.

Concerns about money laundering have drawn skepticism, with some questioning the lack of clear evidence.

User Sentiment

The community's reaction is a mix of dissatisfaction and intrigue. One person remarked, "Your hacking timeline seems biased," adding that fixing issues before they became urgent is part of good development practice. Another noted, "The stolen funds issue needs more investigation."

Critics have pointed out perceived negligence, expressing doubts about the developers' claims of prompt fixes.

Analysis of Vulnerabilities

Thorchainโ€™s series of hacks began with a smart contract bug in 2021 and has included varying incidents:

  • 2021: Smart contract bug led to exploited vulnerabilities in ETH Router.

  • 2022: Validator software inconsistencies caused a major outage.

  • 2026: Recent TSS cryptography problems allowed for a significant drain of funds.

Experts believe the architecture has persistent weaknesses that continue to be exploited.

Key Takeaways

  • ๐Ÿšฉ Thorchain has seen six hacks in five years, highlighting systemic issues.

  • ๐Ÿ’ธ Users lost approximately $227M directly due to these exploits.

  • ๐Ÿ” Many are skeptical of the platform's responses, fueling calls for greater accountability.

The Road Ahead for Thorchain

With the current scrutiny, Thorchain stands at a critical juncture. Experts estimate thereโ€™s a 70% chance the platform will have to enhance its security measures significantly. Community pressure and potential regulatory actions may force improvements in transparency. If these vulnerabilities continue unaddressed, the total losses could escalate to nearly $300M, as trust dwindles.

Reflection on Historical Parallels

Thorchain's ongoing issues starkly resemble the pitfalls seen during the early 2000s tech bubble. Just as many rushed tech firms faced chaos when reality struck, Thorchain must now reconcile its ambitious visions with practical accountability. Can Thorchain redefine its model to restore confidence, or will it repeat the mistakes of the past?