THORChain node operators paused swaps involving assets on 10 networks, including Bitcoin, Ethereum, Solana and Tron, after a refund bug surfaced during an Ethereum block reorganization at 11:34 UTC on Saturday. A 10 ETH deposit that THORChain had credited was removed by the reorg, yet the protocol still refunded it while also refunding the sender's actual deposit, creating an extra 10 ETH payout that triggered an automatic pause. The team warned that a malicious actor could exploit this mismatch during future block reorganizations on external chains. According to Chainalysis, the halt also delayed North Korean hackers' laundering of funds stolen in last week's $6.3 billion Binance hack, since they could not swap through most of THORChain's bridges. Meanwhile, the FBI urged node operators and DeFi services to block transactions tied to addresses used by TraderTraitor, and founder John-Paul Thorbjornsen opposed shutting the protocol down in response to pressure over illicit funds.
Summary written by Upside AI from the original article. Read the source for full details.
Read the original on Cointelegraph ↗
Keywords
Open a keyword to see other news on the same topic.
Related tickers and likely impact
RUNE/USDT
▼ Likely negativeTHORChain
Relevance: medium
| Market | Crypto |
|---|---|
| Exchange | Binance |
| Sector | Layer 1 |
| Market cap | $207.0M |
| Close on 11/01/2026 | 0.55300 |
| Change that session | -12.36% |
Impact is scored by AI from the headline and may be wrong. It is not investment advice.
Related news
- THORChain’s RUNE jumps 13% after Binance’s record $6.3B hack
RUNE rose more than 13% to $0.67 from a local low of $0.59 at 12:20 a.m. UTC, according to TradingView data, after Binance confirmed the $6.3 billion hack. Onchain investigator ZachXBT said funds stolen from Binance and Bitget's September hack passed through THORChain and were combined at the same Ethereum address, and that the Bitget attack was attributed to North Korea-linked TraderTraitor. TRM Labs and Chainalysis also linked the Binance hack to the group. North Korean hackers had previously used THORChain to launder funds from the $1.4 billion Bybit hack and the $388 million Bitget hack. THORChain rejected Bitget CEO Gracy Chen's call to block the attacker's addresses, saying it cannot block individual swaps, though node operators can pause trading across a blockchain or the network. Validator TCB threatened to leave unless the protocol stopped processing North Korea-linked funds.
- Binance sees $3.64 billion in net outflows as withdrawals resume after massive hack
Binance reported $3.64 billion in net outflows after reopening withdrawals on Sunday, as customers rushed to move funds following a $6.3 billion hack. Between 6 a.m. and 3:30 p.m. UTC, the exchange processed $4.65 billion in withdrawals and $1.01 billion in deposits. The net outflows equaled 2.1% of its $171 billion in total assets, based on its latest proof-of-reserves data. Most of the outflows happened in the first couple of hours, and withdrawal volumes have since stabilized, with services restored in phases across 15 networks while testing continues for the rest. The FBI attributed the hack to North Korean hackers known as TraderTraitor, and Binance said it had covered about 95% of the lost funds and would absorb the losses rather than pass them on to users.
- Binance net outflows surge to $5.8B as withdrawals resume after record hack
According to DefiLlama data, Binance recorded $5.8 billion in net outflows over the past 24 hours as customers withdrew funds after the record $6.3 billion hack. By 3:30 p.m. UTC, the exchange had processed $4.6 billion in withdrawals against $1 billion in deposits, resulting in $3.6 billion in net outflows. Binance said withdrawals surged initially but have since slowed and stabilized, and that the outflows were a small fraction of its roughly $171 billion in assets. By 12:36 UTC, withdrawals were enabled for tokens across 15 networks, including Bitcoin, Ethereum, BNB Smart Chain and XRP Ledger, with USDT, USDC and Bitcoin the most withdrawn. On Saturday, Binance said it had replaced 90% of the lost assets using its corporate treasury, Secure Asset Fund for Users and futures insurance fund.
- $3.6B flees Binance on reopen, THORChain co-founder opposes coin freeze: Hodler’s Digest
Binance has reopened withdrawals on 15 blockchain networks after the largest hack ever, in which North Korean hackers stole about $6.3 billion from its hot wallets. Since reopening, the exchange processed about $4.65 billion in withdrawals and received $1 billion in deposits, for a net outflow of $3.64 billion; founder Changpeng Zhao said 98% of users chose to stay, and about 95% of the stolen funds have been replenished. The FBI attributed the attack to the TraderTraitor group, while Elliptic estimated about $2.84 billion of the assets had been frozen on-chain. THORChain co-founder JP Thor opposed halting the protocol to comply with FBI demands, while Coinbase, Circle and Strategy shares fell sharply and Bitcoin bottomed around $76.5K before recovering to 77,745.
- Binance opens crypto withdrawals in phases starting with bitcoin following $6.3 billion hack
- Binance says phase one of withdrawals opens after $6.3B hack
Binance said it reopened the Bitcoin network in phase one of resuming withdrawals, after suspending user withdrawals following a hack of about $6.3 billion on Thursday that the FBI blamed on North Korean operatives. The exchange said it will reopen withdrawals in phases, prioritizing tokens based on user demand over the past week, with stability and security checks completed before each network reopens. Users may face congestion, longer processing times and temporary delays, so failed withdrawals should be retried after a short wait. Binance said on Saturday it had replenished 90% of the stolen assets, up from 80% a day earlier. Updates will be posted on its official X channel, and users can check the withdrawal page or the network status page.
Related markets
Latest news
- Sam Altman makes surprise South Korea visit as OpenAI builds on chip partnerships
OpenAI CEO Sam Altman made an unannounced weekend visit to South Korea, meeting Samsung executives and reportedly holding talks with SK Group Chairman Chey Tae-won. Samsung said Altman met about 50 executives from its affiliates in electronics, finance and biotechnology at Yongin, and the discussions covered AI developments, business opportunities and AI's impact on corporate decision-making. Local media reported the SK talks may have touched on AI chip and data centre cooperation, including planned high-bandwidth memory supplies, though no details were released and SK Hynix could not confirm the meeting. The visit builds on OpenAI's October 2025 partnerships with Samsung and SK Group under its Stargate initiative, which aims to expand AI infrastructure globally, including advanced memory chip supply and AI data centre development in South Korea.
- SACOMBANK unexpectedly announces new acting CEO
SACOMBANK has appointed Nguyen Thi Kieu Anh, a Deputy CEO, as Acting CEO effective 2 November 2026, aiming to speed up completion of the restructuring plan for Sài Gòn Tài Lộc Commercial Joint Stock Bank (ticker STB). Born in 1983, she has more than 20 years of experience in finance and banking, including previous roles at VPBank and LPBank and several management positions. At the same time, Loic Faussier stepped down as CEO and will remain as Deputy CEO in charge of risk management. The bank said the changes maintain continuity in management, optimise resources and comply with safety ratios, while it prioritises corporate customers and green credit and aims to become Vietnam's No.1 bank in digital banking.
- Forget Anthropic, This Is the Best AI Investment to Buy and Hold
The highly anticipated Anthropic IPO could be among the largest ever, with an expected valuation of $1.5 billion to $2 billion. Its registration documents filed on Oct. 26 showed strong first-half revenue growth but also a $693 million operating loss, an $80 billion net loss, and $518 billion in noncancellable debt over 10 years to build data centres, with two clients making up 20% of revenue. The author suggests investors may want to wait and see before rushing into the IPO, and names the Invesco AI and Next Gen Software ETF (IGPT) as a broader way to access AI stocks, up 53% year-to-date and 57% over 12 months. The fund tracks the STOXX World AC NexGen Software Development Index, with about 50% in semiconductors, 84% in US stocks, a 0.57% expense ratio, and AMD, Nvidia and Meta as its top three holdings. The author argues its lower concentration and international exposure make it suitable as a long-term holding.
- More than 2.5 million tax codes still cannot be closed: proposal to cut late-filing penalties by up to 70%
As of Oct. 23, more than 2.5 million taxpayers had ceased operating or were no longer at their registered address but had not completed the procedure to close their tax codes, including about 643,000 suspended cases and nearly 1.88 million cases of no longer operating at the registered address. Since the start of the year, tax authorities have closed 777,835 tax codes, yet new cases are still outpacing processing. Many businesses have overdue tax filings, and fixing them can significantly increase total penalties when closing tax codes. To address this, the Ministry of Finance proposed penalties of 30%, 50% or 70% of the standard level depending on when the missing filings are completed, with a 70% reduction if completed by June 30, 2027. The policy does not waive tax obligations or legal liability and does not apply to tax evasion, tax fraud or use of illegal invoices.
- Rubio says Trump wants to end Iran war 'peacefully' even as both sides prepare for strikes
U.S. Secretary of State Marco Rubio said President Donald Trump would prefer to resolve the war with Iran diplomatically and without military force, while stressing the U.S. has what it needs to act militarily if necessary. His remarks come as reports from The Wall Street Journal and The New York Times suggest both sides are preparing for possible renewed strikes after the Nov. 3 midterm elections. Iranian Supreme Leader Mojtaba Khamenei ordered the armed forces to respond to any threat with an immediate, impactful and geographically unrestricted response, and to update data on U.S. and Israeli assets. Trump told Right Side Broadcasting Network that 'either they'll make a deal, or we'll just end it.' Separately, Iran's foreign ministry designated Britain's Military Intelligence Services a 'hostile group,' accusing the U.K. of backing U.S. operations, including use of RAF Fairford and Diego Garcia.
- Experts: Bank of Japan to raise rates in December
The Bank of Japan (BOJ) kept its short-term policy rate at 1.25% last Friday, with 8 of 9 Policy Board members in support, but raised its inflation forecasts and reaffirmed readiness to keep raising rates. The central bank said risks to consumer price index (CPI) forecasts are tilted upward and that medium- and long-term inflation expectations could rise, pushing core CPI above its 2% target. Governor Kazuo Ueda said the BOJ would adjust monetary policy to keep core inflation anchored around 2%. Several analysts see the hawkish stance as setting up a rate hike to 1.5% at the December meeting, and one said the BOJ might move to hikes every three months instead of six.
Get the briefing on Telegram or Zalo
Join the Upside Telegram channel or Zalo group for the Vietnam stocks and gold briefing at 8:00 and 19:00 (Vietnam time) on trading days, plus a weekly wrap on Saturday morning.