THORChain has officially resumed trading operations after suspending network activity on May 15 following a $10.7 million exploit involving a malicious node operator. The decentralized cross-chain liquidity protocol confirmed that all major services are now fully operational, marking the end of a recovery process that lasted more than a month.
The protocol’s team announced that signing, node churning, secured trade assets, liquidity provider actions, deposits, withdrawals, and swaps have all been restored. The relaunch reopens trading across supported blockchain networks, including Bitcoin, Ethereum, Dogecoin, and other integrated assets.
In a statement shared by the team, THORChain said:
The restart follows a series of security upgrades and network-wide verification procedures designed to address the vulnerability that led to the exploit. According to the team, every vault was verified and every keyshare checked before services were brought back online.
THORChain stated that the recovery effort prioritized security and stability over speed. The protocol worked with developers, node operators, and external security experts to identify the attack vector, implement fixes, and validate the integrity of network infrastructure.
The exploit was linked to a newly introduced malicious node operator that targeted the protocol’s security mechanisms. Despite the incident, the team said automated safeguards prevented losses from affecting user funds directly. The protocol’s liquidity reserves absorbed the financial impact of the attack.
The recovery process also required multiple network upgrades and governance actions from node operators, who remained active throughout the remediation period. THORChain specifically acknowledged the contributions of node operators, developers, and the Maya Protocol team during the restoration effort.
Recently, Security researcher V12 claimed THORChain quietly addressed a critical vulnerability without public disclosure, triggering debate within the community over the protocol’s bug bounty and transparency practices.
With trading services restored, THORChain is shifting focus to upcoming protocol developments. The team confirmed that native Monero (XMR) swaps are already functioning in end-to-end testing and are approaching a live launch.
Zcash (ZEC) integration is also progressing and is expected to follow. Additional roadmap items include dynamic fee mechanisms and efforts to deepen protocol liquidity across supported trading pairs.
The restoration of THORChain’s services is a significant milestone for the protocol, which is widely used for decentralized Bitcoin and cross-chain asset swaps. The successful relaunch concludes a critical recovery period that began with the May 15 exploit and positions the network to resume development on planned feature expansions.
THORChain DefilLama
THORChain’s Total Value Locked (TVL) has risen to $28.03 million, up 7.68% in the past 24 hours. The increase follows the protocol’s return to full operations after its month-long recovery from the May exploit.
According to CoinMarketCap, At the time of writing 11:47 AM UTC, THORChain’s native token RUNE is trading at $0.4217, down 0.3% over the past 24 hours. Despite the slight daily decline, RUNE has gained 2.8% over the last seven days, suggesting improving short-term momentum following the protocol’s return to full operations.
On a broader timeframe, the token remains 7.26% lower compared to a month ago, reflecting continued pressure across the cryptocurrency market. Market participants are closely monitoring whether renewed network activity, restored cross-chain trading, and upcoming features such as native Monero (XMR) and Zcash (ZEC) swaps can support further recovery in RUNE’s price performance.


