THORChain node operators prolonged a network trading break following an October 31, 2026 Ethereum block reorganization to maintain network solvency rather than to carry out the FBI's blocking request

Overview Debates Related claims Topics Sources

On October 31, 2026, the FBI asked THORChain node operators and decentralized finance services to block transactions linked to a roughly $6.3 billion Binance hack that occurred on October 29, 2026

THORChain node operators initiated an automatic network trading pause after the October 31, 2026 one-block Ethereum reorg refund bug caused an extra 10 Ether payout from THORChain's vault

Analyst SomaXBT estimated that transfers of funds stolen in the October 29, 2026 Binance hack included nearly $48 million through Relay, $44 million through THORChain, $32.1 million through Chainflip, and $16 million through Symbiosis

Analyst SomaXBT estimated that around $242 million of funds stolen in the October 29, 2026 Binance hack moved via the Tron blockchain in two days, including $140 million transferred through cross-chain services like Relay, THORChain, Chainflip, and Symbiosis

THORChain technical co-founder Chad Barraford stated that reaching the two-thirds node supermajority consensus required to halt suspicious network routes linked to the $6.3 billion Binance hack takes days or weeks

On October 31, 2026, an Ethereum block reorganization triggered THORChain solvency checks after 10 ETH were refunded, leading operators to suspend trading on 10 of 13 connected blockchains on November 1, 2026

THORChain technical co-founder Chad Barraford stated that while THORChain's official website blocked FBI-listed addresses, independent node operators control network trading and can accept transactions through other interfaces

Blockchain researcher Taylor Monahan argued that THORChain network operators possess the technical ability to halt suspicious transaction routes to prevent illicit cross-chain flows

The FBI omitted Tron blockchain addresses from its list of flagged wallets despite Tron being widely used to move funds stolen in the October 29, 2026 Binance hack

Following the October 29 Binance hack, the Federal Bureau of Investigation, the United States Secret Service, and the Internal Revenue Service Criminal Investigation unit publicly requested THORChain node operators to block TraderTraitor addresses

Individuals cannot deploy a THORChain node without first receiving approval through the protocol's whitelisting process

Anza and the Solana Foundation issued an urgent alert on November 1, 2026, advising Solana mainnet-beta validators to mitigate CVE-2026-98432, an unpatched Linux kernel vulnerability

Anza's official validator client requirements specify running on Ubuntu 24.04 with a public IPv4 address, leaving Solana validators potentially exposed to CVE-2026-98432

Tim Garcia of the Solana Foundation advised Ubuntu operators to drop inbound TCP packets carrying IPv4 options, disable Multipath TCP, and turn off TCP request-socket migration

A root-level breach of a Linux server through CVE-2026-98432 could allow attackers to compromise validator operations and extract signing credentials stored on the machine

As of November 2, 2026, no evidence indicates that any Solana validators have been compromised through CVE-2026-98432

The November 2, 2026 SEC staff guidance on governance tokens reduces regulatory uncertainty for decentralized finance (DeFi) projects, potentially encouraging exchanges and institutional investors to engage with qualifying governance tokens

The FBI observed TraderTraitor hackers converting stolen Binance assets primarily into Ethereum and expected them to launder funds through decentralized finance platforms and instant-swap services

The WEF and BCG report identifies nine policy dimensions, including legal certainty, asset custody, monetary sovereignty, capital flows, and sanctions compliance.

Remote Procedure Call providers for transparent blockchains like Ethereum and Solana are funded by wallet companies