THORChain (RUNE)

Over a month spent in rebuilding @THORChain security model.

The exploit hit GG20, the scheme that splits key control across node operators so no single party holds the full key.

A malicious operator found a way around that and extracted key material piece by piece.

$10.7M gone.

Fix ran in stages: emergency patch, vulnerability fix, KeyVerify improvements.

Worth noting: THORChain is one of crypto's biggest cross-chain rails.

if key material leaks progressively without detection this long, what does "verified secure" even mean for the next protocol running this primitive?

BREAKING: THORChain has resumed trading after the May 15 hack, which resulted in a $10.7 million loss from a single vault.

Instead of printing new $RUNE tokens, the protocol covered the loss using its existing liquidity, helping avoid additional token dilution. https://t.co/CMz75bPOh6