← Back to News
Message Left by Hacker in $8m Attack
July 23, 2021 #News #THORChain

Message Left by Hacker in $8m Attack

Yet another blow has been dealt to the THORChain network, with $8 million in ERC20 tokens drained from the router in the latest of a series of attacks.


The THORChain network has been attacked once again, with $8 million in ERC20 tokens drained from the network. This time, the attacker has left a message.

Could have taken ETH, BTC, LYC, BNB, and BEP20s if waited. Wanted to teach lesson minimizing damage. Multiple critical issues. 10% VAR bounty would have prevented this. Disable until audits are complete. Audits are not a nice to have. Do not rush code that controls 9 figures

Source: Attacker's transaction memos

How it Happened

The preliminary post-mortem:

Source: THORChain Discord

The Impact

  • 966.62 ALCX
  • 20,866,664 XRUNE
  • 1,672,794 USDC
  • 56,104 SUSHI
  • 6.91 YEARN
  • 990,137 USDT
  • Total market value at time of hack: ~$8 million

The network is still halted, and an investigation is underway to uncover how the hacker was able to steal funds. The THORChain team has already confirmed that LPs in the ERC20 pools will be subsidized.

This is a developing story. Follow for updates.

The cave you fear to enter holds the treasure you seek