{"url":"https://newsforagent.com/news/2026-10-31/thorchain-pause-ethereum-reorg-double-refund","markdown_url":"https://newsforagent.com/news/2026-10-31/thorchain-pause-ethereum-reorg-double-refund.md","title":"THORChain Pauses Swaps After 10 ETH Double Refund","headline":"THORChain Halts Swaps on 12 of 13 Chains After Ethereum Reorg Causes Duplicate 10 ETH Refund","description":"An Ethereum reorg led THORChain to refund a 10 ETH deposit twice, tripping an emergency pause across 12 of 13 chains while outbound signing stayed active.","section":"Incidents","published_at":"2026-10-31T18:57:32+00:00","modified_at":"2026-10-31T18:57:32+00:00","author":"News Desk","key_takeaways":["THORChain refunded a single 10 ETH deposit twice after an Ethereum reorganization on October 31, 2026, triggering its emergency pause.","Trading and swaps stopped across 12 of the 13 chains THORChain supports, while outbound signing remained active on most affected chains.","Chainalysis linked the halt to funds stolen from Binance and tied the laundering activity to DPRK actors."],"companies":[{"name":"Thorchain","is_primary":true,"profile_url":"https://akta.pro/company-profiles/0007kci/thorchain","website":"https://thorchain.org"},{"name":"Binance","is_primary":false,"profile_url":"https://akta.pro/company-profiles/00006cw/binance","website":"https://www.binance.com"},{"name":"Chainalysis","is_primary":false,"profile_url":"https://akta.pro/company-profiles/00004tz/chainalysis","website":"https://chainalysis.com"}],"source":{"publisher":"Crypto Briefing","title":"THORChain pauses operations after Ethereum reorg triggers double refund","url":"https://cryptobriefing.com/thorchain-pauses-ethereum-reorg-double-refund/"},"other_sources":[],"tags":["Incidents","Thorchain","Binance","Chainalysis"],"body_markdown":"THORChain refunded the same 10 ETH deposit twice after an Ethereum reorganization on October 31, 2026, tripping the protocol's emergency pause and stopping trading and swaps across 12 of the 13 chains it supports. [Crypto Briefing](https://cryptobriefing.com/thorchain-pauses-ethereum-reorg-double-refund/) reported the halt, which left outbound signing active on most affected chains.\n\n## How the Ethereum Reorg Doubled a Refund\n\nAn unexpected Ethereum reorganization replaced recently confirmed blocks with a competing chain, so transactions that looked final could shift or reappear in a new position. THORChain, which watches Ethereum for deposits, acted on the same event twice and paid back one 10 ETH deposit two times. The duplicate refund activated the emergency brake.\n\nThe shutdown was not total: outbound signing stayed active on most of the affected chains, so some transactions could still go out while swaps were frozen. THORChain is run by node operators, and its rules let them put network integrity ahead of uptime while a problem is investigated. A halt like this can last up to 720 blocks, or about 1.5 hours, and more votes from nodes can extend it.\n\n[Chainalysis](https://akta.pro/company-profiles/00004tz/chainalysis), the blockchain analytics firm, linked the emergency halt to funds stolen from [Binance](https://akta.pro/company-profiles/00006cw/binance) and tied the laundering activity to DPRK actors. With swaps frozen on 12 chains, anyone trying to push those funds through THORChain had to wait. The pause was triggered by the Ethereum reorg and the double refund, not by a deliberate move against the stolen funds.\n\n## THORChain's Scale and Prior Outages\n\nAccording to akta.pro [company records](https://akta.pro/company-data), THORChain is a decentralized cross-chain liquidity protocol founded in 2019 and headquartered in Zug, Switzerland, that enables native cryptocurrency swaps across 13+ blockchains without wrapped tokens. The same records put lifetime swap volume through the protocol at $123.7 billion+ and Q1 2026 swap volume at $2.82 billion, generating $3.3 million in swap fees and $1.9 million in affiliate revenue.\n\nThe records show THORChain resumed full network operations on June 23, 2026 after a $10.7 million GG20 threshold signature exploit on May 15, 2026, deploying the KeyVerify protocol, migrating to new vaults, and restoring trading, signing, swaps, and LP actions. In April 2026 it integrated Solana and Monero for native cross-chain swaps, expanding supported chains to 13+.\n\n## Earlier Halts in 2026\n\nOn October 19, 2026, THORChain kept ZEC swaps halted after a bug triggered a vault slash, deducting about 140 RUNE from 18 node accounts, with a fix scheduled for the v3.21 upgrade around October 23, Thedefiant reported. The same outlet reported that the v3.21 upgrade targeted block 28,366,100 around October 23, addressing an exploit, and that Rujira planned a conditional 24-hour liquidation grace period for borrowers.\n\nOn October 12, 2026, Crypto Briefing reported that THORChain's gross swap fees were recovering but remained 84% below September's peak, which was driven by Bitget exploit flows, and that September's system income reached $3.01 million.\n\n## What Comes Next for THORChain\n\nNode operators can vote to extend the halt past the 720-block window, and the protocol faces how it handles the extra 10 ETH refund and whether it changes how it deals with Ethereum reorgs.\n","publisher":{"name":"News for Agent","url":"https://newsforagent.com"}}