THORChain exploit on 2026-05-15 ($10.7M reported)
Exploit, 15 May 2026. Reported loss $10.7M. Last verified 4 Nov 2026.
major
Reported loss
$10.7M
as reported by the sources
Recovered
-
nothing reported
Status
Unknown
updated 26 Oct 2026
Date
other
Summary
On 2026-05-15 a newly joined THORChain node operator exploited a vulnerability in the GG20 threshold signature scheme and drained approximately $10.7M from one of five vaults. Automatic solvency checks halted signing and trading, and recovery of the losses was left to community governance.
- Protocol
- THORChain
- Type
- Exploit
- Reported loss
- $10,700,000 · as stated: approximately $10.7M source: blog.thorchain.org ↗
Facts and where they come from
| Fact | Value | Source |
|---|---|---|
| Date | May 15, 2026 | blog.thorchain.org ↗ |
| Amount (USD) | approximately $10.7M | blog.thorchain.org ↗ |
Primary sources
- THORChain: exploit report #1 ↗ post-mortem · accessed 2026-11-04
Our own summary of facts published by the sources above. We do not attribute fault beyond them. Amounts are as the sources state them (no USD conversion by us); links and quoted figures last checked 2026-11-04.
Get the next one first
- Alert on new security incidents: hacks, depegs, TVL drops and exchange outflows, by e-mail or Telegram