THORChain node operators initiated an automatic network trading pause after the October 31, 2026 one-block Ethereum reorg refund bug caused an extra 10 Ether payout from THORChain's vault

Overview Debates Related claims Topics Sources

On October 31, 2026, the FBI asked THORChain node operators and decentralized finance services to block transactions linked to a roughly $6.3 billion Binance hack that occurred on October 29, 2026

THORChain node operators prolonged a network trading break following an October 31, 2026 Ethereum block reorganization to maintain network solvency rather than to carry out the FBI's blocking request

Analyst SomaXBT estimated that transfers of funds stolen in the October 29, 2026 Binance hack included nearly $48 million through Relay, $44 million through THORChain, $32.1 million through Chainflip, and $16 million through Symbiosis

Analyst SomaXBT estimated that around $242 million of funds stolen in the October 29, 2026 Binance hack moved via the Tron blockchain in two days, including $140 million transferred through cross-chain services like Relay, THORChain, Chainflip, and Symbiosis

THORChain technical co-founder Chad Barraford stated that reaching the two-thirds node supermajority consensus required to halt suspicious network routes linked to the $6.3 billion Binance hack takes days or weeks

The FBI attributed the October 29, 2026 Binance theft to TraderTraitor, a North Korean state-linked hacking operation, and identified 608 Ethereum, 19 Bitcoin, and one Solana address used by the attackers

On October 31, 2026, an Ethereum block reorganization triggered THORChain solvency checks after 10 ETH were refunded, leading operators to suspend trading on 10 of 13 connected blockchains on November 1, 2026

THORChain technical co-founder Chad Barraford stated that while THORChain's official website blocked FBI-listed addresses, independent node operators control network trading and can accept transactions through other interfaces

Blockchain analytics firm Chainalysis reported that THORChain's network halt inadvertently delayed North Korean hackers attempting to launder funds stolen in a $6.3 billion Binance hack

Cc9f267dcClaimNews event

Binance co-CEO Richard Teng joined CNBC's 'Squawk on the Street' to discuss the recent crypto heist on Binance and said an independent expert will review everything the company has done

Pangolin Intelligence founder Jonty disputed a Nov. 2 Arkham report alleging direct Binance deposits by hackers, explaining that transactions were executed by arbitrage traders utilizing THORChain Asgard vaults

The FBI omitted Tron blockchain addresses from its list of flagged wallets despite Tron being widely used to move funds stolen in the October 29, 2026 Binance hack

Pangolin Intelligence founder Jonty stated that on days of major hacks attributed to North Korea's TraderTraitor group, over 99% of THORChain volume was illicit laundering

During the October 29 Binance hack, the attacker pre-signed 50 transactions with differing nonces to execute a transaction on the Binance hot wallet

Following the October 29 Binance hack, automated scripts distributed funds from the original 10 attacker wallets across over 100 new addresses, then fan-out split them across more than 400 addresses

On Thursday, October 29, at approximately 4:00 PM Eastern Time, Binance suffered a hack that drained approximately $6.3 billion to $6.4 billion in assets

The attacker behind the October 29 Binance hack borrowed approximately 20,000 Ether against collateral on the Aave lending protocol

According to Chainalysis data, North Korea-linked operations accounted for 15% of total reported cryptocurrency hack losses in 2021

The October 29 Binance hack transferred over $6 billion in cryptocurrency within a 20-minute window

The multi-chain withdrawals during the October 29 Binance hack compromised Binance's internal transaction signing infrastructure rather than leaking the underlying private keys