Thorchain Glitch Triggers Ethereum Reorg After 10 ETH Refund

## The Attack Vector A one-block Ethereum reorganization on Saturday triggered a double refund of 10 ETH on Thorchain, setting off an emergency pause that disrupted cross-chain swaps across most of its supported networks. Chainalysis indicates the malfunction inadvertently delayed laundering activities. The reorganization created a timing anomaly that caused the protocol to process the same transaction twice. When the 10 ETH refund request arrived, Thorchain's smart contract logic interpreted it as both an incoming deposit and an outgoing withdrawal simultaneously, executing both paths before detecting the duplication. Network participants reported immediate failures in atomic swaps across Binance Smart Chain, Avalanche, and Polygon bridges that typically route through Thorchain. The pause affected approximately 85% of active liquidity pools on the platform, according to blockchain monitoring data.

Where the Funds Went

The double-refund mechanism directed the same 10 ETH to both the original sender and a secondary address controlled by Thorchain's recovery module. Transaction data shows the funds moved through multiple hops before settling, ultimately returning to the protocol's treasury wallet after the emergency pause took effect. Chainalysis tracked the flow pattern, noting how the duplicated transaction split the amount across two separate paths that converged back to Thorchain's internal accounting system. This explains why no external wallets showed unauthorized withdrawals, but the protocol itself experienced a temporary liquidity drain.

What the Data Shows

Ethereum trading at $2,255.58 with a modest +0.05% 24-hour gain, though the 7-day trend remains bearish at -4.03%. The double-refund incident occurred during a period of elevated network activity, with daily volumes averaging $4.66B across all Ethereum applications. The technical nature of the reorganization suggests an alternative chain split attempt rather than malicious intent. Block explorers confirm the reorganization depth was just one block, indicating a brief network synchronization issue rather than a deep chain split. The Thorchain incident highlights ongoing cross-chain interoperability risks as DeFi protocols increasingly depend on shared blockchain infrastructure. The double-refund mechanism represents a fundamental design challenge in maintaining atomic consistency across heterogeneous networks. Analysts note this vulnerability could inspire similar exploits in other multi-chain platforms facing cross-chain bridge operations. As cross-chain swaps become more complex, protocols must balance user experience with robust dispute resolution mechanisms.