THORChain has released a recovery plan for the attack incident, and voting for node operators has begun
THORChain has released its fourth update regarding the attack incident on May 15, and the proposal ADR028 has been announced, with voting for node operators now open.
According to the recovery plan, the protocol will first absorb losses through its own liquidity, with the remaining portion to be shared by synthetic asset holders; the specific distribution ratio of the two is still under evaluation. The protocol's own liquidity will be reduced to zero, and will be gradually replenished through system revenue. This plan will not issue or sell RUNE, nor will it dilute any holders.
On the technical side, GG20 will be temporarily retained and has completed patch upgrades. Trading will resume after the vulnerabilities are fixed and node rotation is successfully conducted, with a future release pace that is slower and more security-conscious. Innocent nodes located in the same vault as the attacker will be protected, while the attacker nodes will be fully confiscated. The recovered RUNE will be paired with the recovered assets, and any excess will be destroyed.
The protocol also offers a white hat bounty to the attacker to recover funds; if some are returned, the recovery plan will be adjusted proportionally. THORChain remains neutral and permissionless, and there will be no review of the attacker's Swap transactions after trading resumes. Node operators are currently voting on the proposal direction, and the numbers in the ADR are only indicative, with adjustments to be made through Mimir later.
You may also like

Bitcoin vs. Gold in 2026: Which Asset Performs Better in Different Markets?

What is your view on Binance's competitive advantages?

I never expected that the first application of AI x Crypto would be in security auditing

Global Launch: As predictions become the most scarce asset in the AI era, Manadia is defining the next generation of the value internet

Who is footing the bill for the $64 billion accounting frenzy?

Morning Report | CoinEx becomes a key hub for Iran to evade sanctions, involving over $3.8 billion in funds; Kalshi seeks a new round of financing, with a valuation potentially rising to $40 billion

Why do cryptocurrency projects always like to change their names?

From the white-haired stock god to the billionaire fund mogul, the smart people shorting Nvidia are all getting rich using the same framework

Morning News | The draft amendment to the People's Bank of China Law aims to clarify the legal status of digital renminbi; South Korea will transfer about 40 unregistered virtual asset service providers to law enforcement agencies

The cryptocurrency industry has entered the "Show Me" era: merely relying on vision is no longer enough

Interpreting the Ethereum Foundation's new structure: Reaffirming self-sovereignty amid institutional trends

Former SpaceX engineer reconstructs the financial execution system using first principles

Standard Chartered Bank sings a 50x rhapsody again, aiming for AAVE to reach 3500 USD

Tidal Investment: We still have a positive outlook on the AI industry chain, but the reasons have changed

The interim executive director of the Ethereum Foundation speaks out: What is our mission?

Why does OKX want to start a new company with the parent company of the New York Stock Exchange?

Why Is PAXG Price Different From Gold? 5 Reasons Crypto Traders Should Know

WEEX OpenAPI 101: 5 Powerful Modules, AI Trading Tools, and Grab Up to 70% Revenue Opportunities
Learn how WEEX OpenAPI connects traders, developers, AI agents, and trading platforms. Discover WEEX API features, Binance-compatible integration, automated trading workflows, revenue opportunities, and ecosystem possibilities.



