THORChain Suspends Services Urgently Due to Ethereum Block Reorg, Accidentally Blocking North Korean Hackers from Launderin

THORChain, the cross-chain liquidity protocol, was forced into an emergency halt on November 1 after an Ethereum block reorg caused the protocol to erroneously issue a double refund to a user who had deposited 10 ETH, according to blockchain analytics firm Chainalysis. The anomaly triggered the protocol's circuit-breaker mechanism, suspending its cross-chain swap services for all users. The timing was notable: the outage inadvertently slowed North Korean hackers attempting to launder funds stolen from Binance, as they could not complete asset swaps through most of THORChain's cross-chain bridges while the network was down. The incident highlights how protocol-level safety mechanisms can have unintended consequences for on-chain fund flows, and it underscores the operational fragility of cross-chain infrastructure during network-level events like reorgs. Watch for THORChain's service restoration timeline and whether the halted laundering attempts resume once swaps are re-enabled.