Crypto Exchange Throws Red Flag After Big Money Vanishes
<decentralized>Mon May 18 2026
A crypto trading system called THORChain, known for letting people swap coins across different blockchains without wrapping tokens, hit the brakes over the weekend after hackers made off with about $11 million. A vault that holds coins for trading was cracked open, and money flowed out to unknown wallets on nine chains including Bitcoin, Ethereum, and Dogecoin. The team claims regular users weren’t touched, but the exploit showed how quickly things can go wrong even when a project calls itself “unstoppable. ”
Security sleuths spotted the trouble when transactions started moving out of the vault without permission. The weak spot appears to be the signature system that locks and unlocks the vault, letting thieves bypass the usual checks. Within hours THORChain froze most operations to stop more losses. By Sunday trading was still on hold while the network hunted for clues. This isn’t the first time a supposedly bulletproof DeFi project had to pull the plug—Arbitrum and Balancer both froze funds or chains after hacks last year.
Experts say tools like AI are making it easier for attackers to find cracks in complex systems. One hardware wallet maker pointed out that multi-party math, which many DeFi protocols rely on, is getting faster to break than it used to be. Another noted that mixing interactive signing with brand-new crypto math can backfire when something unexpected shifts. In short, what sounds clever in theory can fall apart fast in practice.
The heist also highlights a bigger issue: many blockchain networks behave like banks once problems pop up. Some freeze wallets, others redirect stolen coins into special accounts, and a few just shut down entirely. Tether, for example, recently froze millions of USDT tokens linked to Iran, showing how stablecoins can enforce real-world rules inside crypto. Circle is now building its own blockchain to keep even more control in its hands, raising questions about who really owns the money.
April set a grim record with nearly one crypto exploit every single day. Researchers blame North Korean groups for most of the stolen funds, though Pyongyang denies it. Whether the thieves use old-school hacks or AI-powered tricks, the lesson is clear: in crypto, trust is temporary and security is always a moving target.
