THORChain Network Paused Following Suspected Node Compromise

THORChain has issued an update regarding a recent hacking incident on the X platform. According to ChainCatcher, initial evidence suggests that a node recently added to the network may have been compromised by a malicious actor. This actor allegedly exploited a GG20 TSS vulnerability to access vault participant key information, ultimately reconstructing the vault's private key and executing unauthorized fund withdrawals. As a result, several THORChain nodes have been shut down, leading to a temporary network pause. It is anticipated that RUNE transfers could resume in approximately 12 hours, although this depends on node decisions. However, transaction capabilities, liquidity provider operations, and signing functions remain unavailable, with full network functionality expected to take several days to restore. Recovery plans are under discussion, potentially involving the reduction of stakes for affected nodes and other community-suggested remedies.