THORChain has activated a comprehensive recovery portal for users impacted by a recent $10 million exploit, establishing a self-custodial pathway for affected parties to reclaim funds through a treasury-backed compensation mechanism.
The decentralized exchange protocol confirmed the security breach affected 12,847 wallets across four blockchain networks, with attackers extracting 36.75 Bitcoin valued at approximately $3 million alongside $7 million worth of various tokens across BNB Chain, Ethereum, and Base networks.
Recovery Process and Timeline
The newly launched portal provides affected users with tools to revoke malicious token approvals and submit refund claims backed by an equivalent $10 million compensation pool funded by the protocol’s treasury. Users have a 21-day window to file claims, with the deadline set for June 4.
According to the THORChain Foundation’s Saturday announcement, node operators detected the anomalous activity at 02:14 UTC on May 11, prompting an immediate response that halted trading and outbound signing within eight minutes of detection. The foundation cited a post-mortem analysis from blockchain security firm PeckShield in outlining the attack’s timeline and scope.
Any unclaimed allocations remaining after the June 4 deadline will be transferred to the protocol’s insurance fund, creating a safety net for future incidents while ensuring current victims receive full compensation.
US Crypto Legislation Faces Political Hurdles
Regulatory progress in the United States faces new challenges as Democratic lawmakers signal potential opposition to the CLARITY Act unless stronger ethics provisions are incorporated into the final legislation. The market structure bill advanced through the Senate Banking Committee with bipartisan backing on Thursday, but concerns over conflicts of interest could complicate its path to becoming law.
Several Democratic committee members attempted unsuccessfully to add amendments addressing potential conflicts of interest, particularly regarding President Donald Trump’s connections to the crypto industry through his memecoin ventures and his family’s World Liberty Financial business.
Republican sponsors will need to secure Democratic support to reach the required 60-vote threshold for Senate passage. The White House reportedly aims to have the legislation signed into law by July 4, though no full Senate vote has been scheduled.
Poland Advances Crypto Framework Under EU Guidelines
Polish lawmakers approved government-backed cryptocurrency legislation on Friday, bringing the country into compliance with the European Union’s Markets in Crypto-Assets Regulation framework after two previous presidential vetoes derailed earlier attempts.
The Sejm voted 241 to 200 in favor of the Ministry of Finance-supported bill during the legislature’s 57th sitting in Warsaw. The legislation grants the Polish Financial Supervision Authority comprehensive oversight powers, including the ability to impose administrative sanctions and temporarily freeze accounts and transactions.
This marks the third legislative attempt following repeated vetoes by President Karol Nawrocki, who rejected two previous versions of crypto regulation. Lawmakers ultimately chose the state-backed approach over three competing draft bills that had been under consideration.
The approved bill designates specific regulatory frameworks for market participants operating within Poland’s jurisdiction while aligning domestic oversight with broader EU standards established under the MiCA regulation.
Market Response and Industry Implications
The THORChain incident represents another test case for decentralized finance protocols’ ability to respond effectively to security breaches while maintaining user confidence. The protocol’s decision to establish a full compensation fund demonstrates the evolving approach to incident response within the DeFi ecosystem.
Industry observers note that the rapid detection and response timeline, combined with the comprehensive recovery portal, may set new standards for how decentralized protocols address security incidents. The eight-minute response time between detection and system shutdown represents a significant improvement over previous DeFi exploits that often took hours or days to contain.
The Polish legislative development signals continued momentum toward comprehensive crypto regulation across European Union member states. With MiCA taking effect across the bloc, individual countries are working to implement domestic frameworks that align with the broader regulatory structure while addressing local market conditions.
These parallel developments in security response and regulatory advancement highlight the maturing institutional infrastructure surrounding digital assets, as both private protocols and government frameworks evolve to address the unique challenges presented by decentralized financial systems.