Key Takeaways
- A technical glitch on Thorchain disrupted cross-chain swaps, coinciding with an FBI request to block North Korean funds.
- The incident highlights the complexities and challenges of regulating cross-chain infrastructure.
- The Indian government’s response to the incident will be crucial in shaping the future of cryptocurrency trading and cross-chain swaps in the country.
Ethereum Reorg Jolts Thorchain Into Emergency Shutdown
A one-block Ethereum reorganization on Saturday triggered a double refund involving 10 ETH on Thorchain, setting off an emergency pause that disrupted cross-chain swaps across most of its supported networks.
Chainalysis said the malfunction inadvertently delayed laundering activity connected to Binance’s $6.4 billion theft.
The FBI urged Thorchain node operators to block transactions associated with North Korean hackers, creating an extraordinary collision between technical failure and law enforcement pressure.
Technical Failure and Law Enforcement Pressure
The trouble began when Ethereum reorganized a single block, effectively replacing a previously accepted segment of its transaction history.
A 10 ETH deposit intended for a Thorchain vault appeared in the discarded block but never returned to Ethereum’s canonical chain.
Thorchain’s observers had already recognized the deposit and credited the vault.
When the associated swap failed its price conditions, the protocol refunded 10 ETH that the vault had never actually received.
Chainalysis Says Binance Hack Laundering Hit a Roadblock
The malfunction quickly snowballed into a broader operational disruption.
Trading and new swaps stopped across 12 of Thorchain’s 13 supported external networks, although certain previously initiated outbound payments remained operational.
Chainalysis seized on the irony, writing that Thorchain had “inadvertently delayed the laundering of a significant amount of funds stolen from Binance.”
- The emergency pause prevented ordinary customers and suspected North Korean money launderers alike from accessing most of Thorchain’s cross-chain swapping routes.
- The disruption followed Binance’s Oct. 29 breach, which investigators attributed to North Korea’s Tradertraitor operation.
- Blockchain analysts had identified stolen funds moving through Thorchain-associated routes, including activity connected to earlier cryptocurrency thefts.
FBI Presses Thorchain Node Operators to Block North Korean Funds
While developers investigated the malfunction, federal authorities were pursuing a separate approach.
The FBI, working alongside the U.S. Secret Service and IRS Criminal Investigation, issued an Oct. 31 alert urging infrastructure providers to prevent transactions involving wallets connected to the Binance theft.
Its appeal explicitly named Thorchain node operators, alongside RPC providers, instant exchanges, decentralized finance (DeFi) services and blockchain analytics firms.
The request was voluntary rather than a court order.
A 10 ETH Accounting Error Complicates a Multibillion-Dollar Heist
The episode exposed a peculiar contradiction in cross-chain infrastructure.
A system designed to move cryptocurrency without centralized permission briefly became unavailable because its own accounting protections detected a missing deposit.
Developers planned changes to observation and finalization procedures while addressing the affected vault’s shortfall.
Read also: Private Credit Funds' Exposure to Banks
The interruption lasted several hours, with restoration proceeding across individual chains.
Background and Timeline of Events
The incident began on Saturday with the Ethereum reorganization, which triggered the double refund on Thorchain.
The following day, Chainalysis reported that the malfunction had delayed the laundering of funds stolen from Binance.
On October 31, the FBI issued its alert to infrastructure providers, urging them to block transactions associated with the Binance theft.
Expert Perspective
According to experts, the incident highlights the complexities and challenges of regulating cross-chain infrastructure.
“The Thorchain glitch and subsequent FBI request underscore the need for clear guidelines and oversight in the cryptocurrency industry,” said one expert.
Implications for Readers in India
The Thorchain glitch and subsequent FBI request have significant implications for readers in India, particularly those involved in cryptocurrency trading and cross-chain swaps.
As the Indian government continues to navigate the regulatory landscape of cryptocurrencies, incidents like this highlight the need for clear guidelines and oversight.
Furthermore, the fact that the FBI is actively pursuing North Korean hackers and urging infrastructure providers to block transactions associated with the Binance theft underscores the global nature of cryptocurrency crime and the importance of international cooperation.
What to Watch Next
As the situation unfolds, readers should keep a close eye on developments in the Thorchain ecosystem, including any updates on the accounting error and the FBI’s request to block North Korean funds.
Additionally, the Indian government’s response to the incident and any subsequent regulatory changes will be crucial in shaping the future of cryptocurrency trading and cross-chain swaps in the country.
- Thorchain’s plans to address the accounting error and prevent similar incidents in the future
- The FBI’s efforts to track and block North Korean hackers and their associated transactions
- The Indian government’s regulatory response to the incident and its implications for the cryptocurrency industry
Frequently Asked Questions
What caused the Thorchain glitch?
The glitch was caused by a one-block Ethereum reorganization, which triggered a double refund involving 10 ETH on Thorchain.
What was the impact of the glitch on cross-chain swaps?
The glitch disrupted cross-chain swaps across most of Thorchain’s supported networks, preventing ordinary customers and suspected North Korean money launderers from accessing most of Thorchain’s cross-chain swapping routes.
What is the FBI’s role in the incident?
The FBI issued an alert to infrastructure providers, urging them to block transactions associated with the Binance theft, which is believed to be connected to North Korean hackers.
