THORChain's network status page showed trading and transaction signing marked OK on 10 of its 13 external networks on Wednesday. Swaps had been paused on most of them since Saturday, Oct. 31. BNB Smart Chain, Cosmos Hub and Solana were still flagged with warnings.

The seven networks back in service are Bitcoin, Ethereum, Bitcoin Cash, Dogecoin, Litecoin, Tron and Zcash. Avalanche, Base and the XRP Ledger kept trading through the pause. On the same explorer, 101 of 111 nodes had upgraded to version 3.21.1, the software release behind the restart.

How a One-Block Ethereum Reorg Left a 10 ETH Shortfall

The halt started with a one-block Ethereum reorganization, in which the network replaced a recently produced block. That block held a 10 ETH deposit that THORChain had already credited.

The sender's actual deposit was then refunded as well. That paid out an extra 10 ETH and left the affected vault 10 ETH short. THORChain's automatic solvency checker spotted the gap and halted ETH swaps. Within about two minutes, node operators stopped signing outbound Ethereum transactions so no more funds could leave the vaults. Nodes then paused trading across multiple networks.

The loss was recovered. THORChain confirmed that the recipient returned the extra 10 ETH, restoring the vault's balance.

Three Networks Still Flagged on the Status Page

On the explorer, Bitcoin, Ethereum, Bitcoin Cash, Dogecoin, Litecoin, Tron, Zcash, Avalanche, Base and XRP each show all four status checks (scanning, trading, liquidity provision and signing) as OK. BNB Smart Chain, Cosmos Hub and Solana show only two of the four as OK.

It is not yet known when those three will reopen. Swaps that route through BNB Smart Chain, Cosmos Hub or Solana stay unavailable until their status clears.

The size of RUNE's move on the day is not settled. Figures for the daily gain disagree, and we could not check them against a price feed.

Halt Slowed Binance Hack Laundering, Chainalysis Says

The pause had a side effect. Blockchain analytics firm Chainalysis said it inadvertently delayed North Korean hackers trying to launder funds stolen in the $6.3 billion Binance hack. The emergency halt cut those users off from most of THORChain's cross-chain swap routes, alongside everyone else.

On Oct. 31, the same day the halt began, the FBI attributed the Binance theft to North Korea's TraderTraitor group. It urged THORChain node operators, DeFi providers and other crypto infrastructure operators to block transactions tied to the attackers' addresses.

With Bitcoin and Ethereum swaps back online, THORChain's cross-chain routes are open again to any user, including anyone holding those funds. Whether operators act on the FBI's request is up to them.

The Restart Follows a $10.7 Million Exploit Earlier This Year

This is not THORChain's first long pause in 2026. A $10.7 million exploit earlier in the year forced a prolonged trading suspension. Trading reopened on June 23 after 39 days offline.

The October halt was shorter, and the missing 10 ETH came back. But three of the 13 networks are still not fully back, and THORChain has not yet restored all its routes. Altcoin Buzz readers have seen a similar pattern recently: Ontology restarted its mainnet after its second security halt in six weeks.

The next marker is on the same status page: BNB Smart Chain, Cosmos Hub and Solana returning to four OK fields, and the 10 remaining nodes moving to 3.21.1.