THORChain kept outbound signing active on most affected chains during the October 31, 2026 swap pause, allowing existing payments to proceed while new swaps remained blocked

Overview Debates Related claims Topics Sources

THORChain's emergency pause mechanism was activated after an Ethereum reorg caused a duplicate 10 ETH refund to be processed, catching the anomaly post-transaction rather than preventing it beforehand

THORChain paused trading and swaps across 12 of the 13 chains it supports after an Ethereum reorganization triggered a double refund error on October 31, 2026

The hijacked websites include Pickle Finance, Origami Finance, FluxBeam, Echelon, StonkFun, StakePoint, Flap, and Kintsu, while their underlying smart contracts remained unbreached

Hackers hijacked at least 12 decentralized finance websites registered through Name.com in a DNS hijacking attack that rewrote domain records to redirect users to malicious frontend infrastructure

The 12 DeFi websites hijacked through the Name.com DNS attack were injected with Step Drainer, a Malware-as-a-Service toolkit that compromised frontends to harvest unlimited token approvals and signatures across more than 20 blockchain networks

Cloakd, the developer behind FluxBeam, stated on X that its Name.com representative maintained the DNS hijacking incident originated with third-party issuers rather than Name.com itself

Security researchers noted that registrar-level domain hijacking bypasses smart contract security controls and standard URL inspection, creating single-point-of-failure supply chain risks across decentralized finance protocols

DeFi protocol frontends suffered DNS attacks similar to the Name.com DNS hijacking attack during previous incidents, including breaches targeting Aerodrome and Velodrome in November 2025 and Galxe via Dynadot in October 2023

Attackers behind the Name.com DNS hijacking attack redeemed Kintsu's staked MON tokens on Monad and withdrew funds from lending protocol Neverland, while on Robinhood Chain they extracted tokenized stock assets including NVDA and AAPL from Morpho

Kintsu and Origami Finance publicly attributed the DNS hijacking attack on their Name.com-registered websites to cloud infrastructure provider Vercel, which had chosen Name.com as the registrar for its rebuilt domain service in December 2025

An unexpected reorganization of the Ethereum network on October 31, 2026 caused THORChain to issue a duplicate refund on a single deposit of 10 ETH

Cc9f267dcClaimNews event

Aave guardians restored V3 and V4 market operations in four waves

Cc9f267dcClaimNews event

A wallet associated with the hacker behind the $6.3 billion Binance exploit deposited 60 million USDT into Aave V3 Ethereum Core to borrow 19,762 WETH

Zilliqa's cross-chain bridge X-Bridge remains suspended following security incidents disclosed on October 27, 2026, with no reopening date disclosed

Zilliqa is investigating security incidents disclosed on October 27, 2026 affecting its cross-chain bridge X-Bridge and ZRC2 proxy contracts used by liquidity pools, including PlunderSwap

Coinbase supports deposits and withdrawals for Ripple's RLUSD on the XRP Ledger, Ethereum, and Coinbase's Base network

OKXICE plans to execute 24/7 tokenized stock trades settled in stablecoins through permissioned automated market maker pools using Uniswap v4 on OKX's XLayer blockchain

The tokenized stock market expanded past $4.4 billion across 36 issuers, with deposits in decentralized finance protocols surpassing $300 million by October 2026

Hyperliquid's HIP-3* upgrade adds optional onchain allowlists managed by deployers to restrict market access, and is available on testnet as of October 26, 2026

Hyperliquid described itself as a neutral infrastructure layer where deployers retain control of and legal responsibility for their own permissioned markets