THORChain (RUNE) Review: OG Score & Community Audit

THORChain has serious security and economic baggage despite its mature architecture. The clearest example is THORFi: by January 2025, Lending and Savers had accumulated roughly $206M in liabilities. Lending could require more RUNE to be minted when loans closed if RUNE underperformed the collateral assets, creating exactly the reflexive supply problem the protocol eventually had to shut down. The debt was ultimately restructured into TCY, rather than simply being repaid in full.
Then came a fresh security failure in May 2026. An attacker exploited a vulnerability in THORChain's GG20 threshold-signature implementation and drained approximately $10.7M from one Asgard vault. The attacker had only entered the active validator set two days earlier. Automatic solvency checks and emergency node coordination contained the attack, but the fact that a newly churned validator could exploit the signing system and reconstruct vault key material is a major security concern.
The emergency architecture itself is another risk. Node operators can trigger network pauses, while Mimir allows validators to change important operational parameters. During the May exploit, three node votes were enough to trigger major network-wide emergency changes, while a 66% threshold is used for automatic chain halts. That is useful for stopping a drain, but it also means the protocol can become heavily dependent on validator coordination during crises.
The cross-chain design compounds the attack surface. THORChain simultaneously operates vault infrastructure and chain-specific software across numerous external networks, so security depends not only on THORChain's own code but also on every connected chain and its Bifröst implementation. The May 2026 exploit showed that the TSS layer itself could become the weakest link.

The system's real yield distribution layout is excellent, but it means nothing when recurring security exploits repeatedly drain millions from the protocol. With the token bleeding out at $0.42 and TVL hovering at an all time low of $68M, you are taking on massive protocol risk for a narrative that is facing a major confidence crisis. Even though the chain is starting to wake back up, the environment is still highly unstable. The trading depth hasn't recovered, and user confidence is completely shaken. Treat the network as a high risk zone until the upgrade goes through a full cycle of normal market volume without a secondary breach. Let the team prove they can secure the code for a consecutive six month window before you risk any hard capital here. https://defillama.com/protocol/thorchain-dex Hack: https://www.binance.com/en/square/post/323740397318594

Thor chain Lost all community after the hack the hacker drained $8m and warned that more could have been stolen, as Defi the hack ruined it's reputation investors lost trust and project is still recovering but price is crashing. Team built more strong security layers but crack in token difficult to be fixed, team is still building and developing but it remains a unreliable asset. Back details: https://www.theblock.co/post/112308/thorchain-suffers-8-million-loss-by-hacker-wanting-to-teach-lesson?hl=en-GB#:~:text=In%20this%20attack%2C%20the%20platform,have%20been%20much%20more%20damaging.

Bro, the tech slaps but the vibes are cooked 💀 $200M in bad debt, flirting with insolvency, the top dev already walked, and even Lazarus Group treated it like their personal ATM. Yeah, the community stepped in and patched things up but creditors still got hit with a brutal 90% haircut. Easy pass for now until it’s out of the regulatory crossfire. Cc 👉 https://www.ainvest.com/news/north-korean-hackers-launder-240m-thorchain-chief-developer-resigns-2502/

THORChain is a "Must-Watch" for 2026. It is the plumbing of the decentralized world. While the price is currently cooling off after the big March 5th upgrade, its fundamental value has never been higher...

I love this chain particularly because it's one of the few DeFi protocols that actually solved native cross chain swaps without wrapped assets with billions of liquidity flow. However, after the $1.4B Bybit hack in February 2025, the attacker used THORChain heavily to most swap stolen ETH into other assets generating huge fees from the activity. That act question the chain reputation as a permissionless cross chain swap infrastructure. Bybit hack breakdown 👇 https://www.coindesk.com/markets/2025/03/04/thorchain-sees-record-usd4-6b-volume-after-bybit-s-usd1-4b-hack

It’s innovative and well-executed, but its complexity could intimidate casual users