The latest THORChain halt started with something almost boring: a single-block Ethereum reorganization on October 31 that quietly erased a 10 ETH deposit the protocol had already promised to remember. What followed was a textbook case of the books disagreeing with reality – and a protocol-wide swap freeze across roughly 10 of the 13 chains it supports.
THORChain published its full breakdown on November 1, and the short version is that its refund logic paid out 10 ETH twice against collateral it only ever received once. The user returned the funds, vault solvency was restored, and nobody needs to explain to their spouse why the ETH is missing. Still, the incident flagged a reorg-replay weakness the developers are now patching.
How a 10 ETH refund broke the books
Here is the sequence. A 10 ETH deposit landed in a block that Ethereum’s canonical chain promptly discarded. THORChain’s observers had already credited the deposit, so when the associated trade missed its price limits, the refund path fired – returning 10 ETH the vault never actually held. Two outbound payments, one unit of collateral. The protocol’s automated solvency checker caught the shortfall and halted ETH swaps within about two minutes; node operators then froze transaction signing across the other affected chains.
Swaps stayed paused on most chains while Avalanche, Base, RUNE and the XRP Ledger kept running. RUNE dropped roughly 11-15% around the halt before stabilizing, which is roughly the market’s way of filing a mildly worded complaint.
The reorg-replay risk being patched now
THORChain’s deeper problem is structural: because it credited a deposit the canonical chain rejected, a sophisticated actor could in principle resubmit the same transaction after a future reorg and get paid twice again. The project says a fix is in development – the on-chain equivalent of fixing the door after noticing the wind, but before anyone walked off with the silverware.
One side note worth flagging: Chainalysis observed that the pause incidentally slowed North Korean attempts to launder proceeds from the recent Binance hack – an accidental speed bump, not a deliberate one.
For now, the THORChain halt is contained, the 10 ETH is back, and the incident stands as a clean reminder that in cross-chain finance, a reorg is never just Ethereum’s problem.
