THORChain exploit drains $11 million, RUNE falls 13%

RUNE slumped 13% to around $0.51 after THORChain announced a suspected exploit that siphoned roughly $11 million across Bitcoin, Ethereum, BNB Smart Chain and Base, prompting an emergency pause of all protocol activity【1】.

What triggered the price drop

On the morning of May 15 2026, on‑chain investigator ZachXBT flagged a series of small transfers that moved assets worth about $10.8 million from wallets linked to the attacker, spanning Bitcoin, Ethereum, BNB Chain and Base【3】. Security firm PeckShield identified 36.75 BTC among the stolen funds, confirming the cross‑chain nature of the breach【3】. THORChain immediately paused all swaps and signing operations, a move that lasted roughly 12 hours before the network resumed limited activity【3】. The sudden loss of liquidity and the uncertainty over fund recovery drove the sharp sell‑off in RUNE.

Context and market reaction

RUNE’s $0.51 level sits well below its recent low of $0.58, marking a $0.07 (≈12%) decline in a single session【1】. Over the past year the token is down 72% year‑over‑year, a trajectory now accelerated by the exploit【2】. THORChain has a history of security incidents, including a July 2021 breach that cost $4.9‑$5 million and a 2025 exploit that erased about $1.2 million, underscoring persistent vulnerabilities in its cross‑chain design【1】. The protocol’s non‑custodial nature makes it a frequent conduit for laundering stolen funds; prior hacks such as the $293 million Kelp DAO breach and the $1.4 billion Bybit hack saw large volumes routed through THORChain, adding to reputational risk【2】【3】.

On‑chain and tokenomics snapshot

The exploit did not target RUNE’s tokenomics directly, but the loss of $11 million in pooled assets reduces the overall liquidity backing the token, potentially pressuring future fee revenue. RUNE remains down 72% on a 12‑month basis, and its 24‑hour price change after the incident was a modest ‑0.08%, reflecting lingering market uncertainty despite the brief trading halt【3】.

What to watch

• RUNE price levels: $0.50 (current support) and $0.58 (recent low) as traders gauge recovery momentum.
• Protocol updates: Any official statement from THORChain on the exploit’s cause, especially regarding Multi‑Party Computation (MPC) or threshold‑signature wallet flaws, could shift sentiment.
• On‑chain fund movements: Tracking the flow of the ~$10 million in stolen assets across wallets may indicate whether the funds are being consolidated or dispersed, influencing recovery prospects.

The episode highlights the ongoing security challenges facing cross‑chain DeFi platforms. How THORChain addresses the breach and restores confidence will determine whether RUNE can stabilize or face further downward pressure.