THORChain

THORChain is a Cosmos SDK blockchain whose main job is swapping coins between other blockchains. A user sends real BTC to a THORChain vault address on Bitcoin and receives real ETH, XRP or another supported coin on its own chain, with no wrapped token in between and no exchange account. Every pool pairs an outside asset with RUNE, THORChain's native token, so a BTC to ETH swap runs BTC to RUNE and then RUNE to ETH in a single transaction.

THORChain says no company, foundation or DAO controls it. Its January 2026 terms of use state that no single company or legal entity owns or operates the protocol, and that the website and swap interface are maintained by a community of contributors. Validators, called node operators, run the network and vote on parameters. The thorchain.org contributors page names Chad Barraford as a co-founder; the project publishes no corporate address, registration or accounts.

Above the base layer sits an app layer called Rujira, which runs CosmWasm smart contracts for order books, lending and similar products, with revenue split 50:50 between THORChain and Rujira according to the docs.

Each connected chain has vault addresses controlled jointly by THORChain's validators through a threshold signature scheme (TSS). No validator holds a whole key; a supermajority must cooperate to sign an outbound payment. Each validator must bond more than 300,000 RUNE, according to the docs, and the protocol aims to keep total bonded RUNE at about twice the value of non-RUNE assets in the pools, so that stealing the pooled funds would cost more than it earns. Validators rotate in and out in regular churns, and the funds move to new vaults each time.

Several protections sit on top: confirmation counting before inbound deposits are credited, throttling of large outbound payments over up to about an hour, a solvency checker that halts a chain if a vault's on-chain balance falls short of its records, and granular halts that node operators can trigger. Large swaps can be split into streaming swaps to cut price impact, and THORChain's docs say its pricing and arbitrage design protects swappers against sandwich attacks and other MEV. For how THORChain's design compares with other cross-chain routes, see THORChain next to other crypto bridges.

A THORChain swap carries four kinds of cost, and the interface shows the total before the user signs. THORChain does not charge a flat percentage: the liquidity fee scales with how much of a pool a swap consumes, with a network-wide minimum of 10 basis points as of September 2026. Since that month some interfaces, starting with ShapeShift, Edge Wallet and Symbiosis, have a dynamic minimum per trading pair that moves daily.

The affiliate fee is where interfaces differ most. THORChain's own swap site, wallets and aggregators each set their own, so the same swap can cost noticeably more in one app than another. Network income is split 59% to validators and LPs, 20% to protocol-owned liquidity, 10% to TCY stakers, 5% each to a developer fund and marketing, and 1% burned.

RUNE is in every pool, is bonded by validators and pays network rewards. The docs say all RUNE is released, with no vesting, and that ADR-023 cut the maximum supply to about 360 million by burning most of the reserve. CoinGecko showed about 329 million circulating in October 2026.

TCY exists because of THORFi. Lending and single-sided savers, known together as THORFi, built up obligations the network could not meet, and in January 2025 they were paused and then deprecated. The docs put the debt at about $210 million. Each dollar owed was converted into one TCY, a token that earns 10% of system income paid in RUNE. Creditors got a claim on future revenue, not their money back, and TCY trades at market prices.

THORChain is non-custodial in the sense that no company holds user funds, but during a swap and while assets sit in pools, those assets are held in validator-controlled vaults. The docs say the network briefly retains the inbound asset before sending the output. That puts the vault-key system at the center of the risk.

On 15 May 2026 that system failed. According to THORChain's exploit reports, a new node with about 635,000 RUNE bonded churned in on 13 May, planted a flawed key during vault setup and deliberately failed signing rounds hundreds of times to leak fragments of other validators' key shares. With enough fragments it rebuilt the private key of one of five Asgard vaults and drained it. Losses were first put at $7.4 million and revised to about $10.7 million. The solvency checker halted affected chains within the hour, and the whole network stopped until 22 June. Soda Labs, a cryptography firm in THORChain's security group, analyzed the attack and audited the fix, and THORChain plans to move from the GG20 signing library to FROST and DKLS schemes.

Earlier incidents include an Ethereum parsing bug in June 2021 and two ETH Router exploits in July 2021, after which THORChain said its treasury would cover LP losses. The project's bug bounty was retired in March 2026; security reports now go to an email address with no payout. Published audits include CertiK (2020), Kudelski on TSS (2020), Gauntlet economic reviews (2020), IOActive (2020), Halborn (2021), Trail of Bits (2021) and Zellic on Bifrost clients. There is no insurance fund for swappers.

In late September 2026, funds stolen in a hack of Bitget moved through THORChain, and the exchange's CEO asked the network to block them. THORChain declined, describing itself as neutral, permissionless infrastructure. That stance is consistent with its design, and it also means THORChain will not freeze or reverse a mistaken or fraudulent swap.

Using THORChain needs a self-custody wallet that supports it; the docs list Vultisig, Keystore and Ledger among options, and wallets such as Trust Wallet route swaps through it. The swap site at swap.thorchain.org lets a user connect a wallet, pick the source and destination coins, check fees and slippage, and sign. There is no account, no sign-up and no KYC at the protocol level. THORChain's FAQ says the protocol has no geographic restrictions, but individual interfaces may set their own.

A swap completes when the output lands on the destination chain. Liquidity providers withdraw by removing liquidity through an interface. Node operators can halt trading, liquidity changes or signing on a chain at any time, and did so for five weeks in 2026, so exits are not guaranteed during an incident. Memoless deposits were switched off in August 2026 after abuse, which matters for wallets that relied on them.

There is no customer support team. The project's site points to Discord, Telegram (t.me/thorchain_org), X and the developer docs, plus alert bots on Telegram that report halts and network events. During the May 2026 incident THORChain warned that impersonators were spreading fake links; recovery or refund offers from strangers are a scam pattern. Swap problems are usually best raised with the wallet or interface used, since it built the transaction.

THORChain's history alternates between expansion to new chains and long halts after failures, and both trends continued in 2026.

• 2020: core code repository created; audits by CertiK, Kudelski, Gauntlet and IOActive.
• June and July 2021: three exploits on the Ethereum integration; Trail of Bits and Halborn audits follow.
• February 2024: ADR-012 sets THORFi lending to a flat 200% collateral ratio.
• January 2025: THORFi paused and deprecated; debt converted into TCY, launched in May 2025.
• June 2025: XRP Ledger swaps go live.
• March 2026: bug bounty retired.
• May to June 2026: GG20 vault exploit; five-week halt; restart on 22 June.
• August 2026: v3.20 restores validator churn and activates protocol-owned liquidity.
• September 2026: Bitget hack proceeds swapped through the network.