Incident All ledgers
THORChain DEX: $10.7m
THORChain DEX lost $10.7m on 15 May 2026. Ranked 189th of 1,272 crypto failures, with method, returned funds and comparable incidents.
- Date
- 15 May 2026
- Lost
- $10.7m
- Returned or repaid
- None recorded
- Target
- Chain
- Category
- Bridge & Cross-Chain
- Method
- Bridge Logic Flaw
- Chains
- Bitcoin, Ethereum, Base, BSC
On May 15, 2026, a malicious node newly churned into THORChain exploited a flaw in the GG20 threshold-signature scheme protecting its Asgard vaults, authorizing withdrawals that drained about $10.7 million across Bitcoin, Ethereum, BNB Chain and Base.
Against the ledger
- It ranks 189th of the 1,272 incidents with a known loss, and 26th in 2026.
- It accounts for 12.9% of the $83.1m in known losses in May 2026.
- 56 incidents in the ledger are classified as Bridge & Cross-Chain, for $1.53bn in total. This one is 0.7% of that.
- The ledger records no returned funds.
Other incidents named THORChain
| Date | Target | Lost | Type | Method | Returned |
|---|---|---|---|---|---|
| 22 Jul 2021 | THORChain DEX | $8.0m | DeFi Protocol | Withdrawal Logic Flaw | — |
| 15 Jul 2021 | THORChain DEX | $5.0m | DeFi Protocol | Bridge Logic Flaw | — |
| 29 Jun 2021 | THORChain DEX | $350,000 | DeFi Protocol | Bridge Logic Flaw | — |
Closest in size by the same method
| Date | Target | Lost | Type | Method | Returned |
|---|---|---|---|---|---|
| 04 Oct 2021 | pNetwork | $13.0m | DeFi Protocol | Spoofed Event Log | — |
| 17 May 2026 | Verus-Ethereum Bridge | $11.5m | DeFi Protocol | Forged Proof | — |
| 07 Jun 2026 | Syscoin Bridge | $10.0m | DeFi Protocol | Forged Proof | — |
| 01 Jan 2025 | NoOnes | $7.9m | DeFi Protocol | Cross-Chain Message Spoofing | — |
| 22 Jul 2026 | Verus-Ethereum Bridge | $7.5m | DeFi Protocol | Forged Proof | — |
All failures in 2026 · The failures ledger
Amounts are DefiLlama’s estimates and can change as incidents are revalued. Its returned figure can include money a company repaid itself, not only funds recovered from attackers. Source: DefiLlama.
Cite this Bitminer.io, “THORChain DEX, failures ledger”, data to 2 November 2026, https://bitminer.io/ledger/incident/thorchain-dex-2026-05-15/. How this is built