Security incident · 2026-05-15
THORChain DEX
According to the public DefiLlama incident dataset, THORChain DEX (Bitcoin, Ethereum, Base, BSC) suffered a security incident on 2026-05-15, with about $10.7M reported lost.
| Date | 2026-05-15 |
|---|---|
| Reported loss | $10.7M |
| Chain | Bitcoin, Ethereum, Base, BSC |
| Target type | Chain |
| Technique class | Bridge & Cross-Chain |
| Technique | Bridge Logic Flaw |
| Bridge incident | Yes |
| Within 2026 | #22 by loss that year, 0.5% of all reported losses that year |
How this kind of attack works
A bridge confirms on one chain and releases on another. When confirmation was bypassed, the attacker received assets on the target chain without depositing.
Would a pre-payment check have helped
Bridge mint/verification flaws happen inside the bridge and are addressed by its own security design and audits.
Other incidents with the same technique
- Binance Bridge2022-10-06 · $570.0M
- Liquid Network2026-09-06 · $320.0M
- Kelp2026-04-18 · $293.0M
- Nomad2022-08-01 · $190.0M
- Bitcoin Gold2018-05-16 · $18.0M
- pNetwork2021-10-04 · $13.0M