WiremarketsDextape brief
A THORChain Bug Has Slowed North Korean Hackers Laundering Stolen Binance Funds
THORChain says the refund flaw a one-block Ethereum reorg exposed could let attackers pull funds from its vaults after future reorgs, and most of its chains are still halted.
Dextape brief
THORChain paused trading across ten blockchain networks after a refund error tied to a deposit, according to the protocol's own account. Chainalysis said the halt slowed North Korean hackers moving funds stolen from Binance. The trouble began when a 10 ETH deposit was recorded before Ethereum discarded its block in a one-block reorganization on Saturday. THORChain then returned the deposit it believed it held and also refunded the real one, leaving a vault short by 10 ETH. A solvency checker halted ETH swaps, and a three-node vote paused all chains. The sender has since returned the 10 ETH, closing the gap. THORChain warned the flaw could let a malicious actor drain vault funds, and developers are working on fixes with no date given.
Why it matters: It shows how a network's emergency pause can slow illicit fund movement while also exposing a remaining risk to the protocol's vaults.
Read the full story
Dextape context
Built from Dextape’s own wire, stories and glossary.
Mentioned in this story
Open a coin page for its current price.