The native token of the THORChain decentralized exchange, RUNE, advanced by roughly 15 percent over a 24-hour window, reaching levels near $0.64.
The move coincided with the protocol’s restoration of cross-chain swapping activity on the majority of its linked networks after a multi-day suspension that began on October 31.
According to a statement issued by the official THORChain account, swapping functionality returned on Avalanche, Base, Bitcoin Cash, Bitcoin, Dogecoin, Ethereum, Litecoin, the protocol’s own RUNE asset, Tron, the XRP Ledger, and Zcash following the deployment of software version 3.21.1.
Three networks—Cosmos Hub (ATOM), BNB Smart Chain, and Solana—remained restricted.
The update also noted that 14 of the network’s active validator nodes had not yet installed the 3.21.1 release, and that full participation by every active node was required to resolve remaining performance issues with swaps.
The same release was described as bringing the protocol one step closer to enabling native Monero trading.
The interruption originated on October 31 when Ethereum experienced a single-block reorganization at 11:34 UTC.
Swapping on several blockchains has resumed following the 3.21.1 update.
Trading blockchains: AVAX, BASE, BCH, BTC, DOGE, ETH, LTC, RUNE, TRON, XRPL, ZEC
Halted blockchains: ATOM, BSC, SOL
14 active nodes still haven’t updated to 3.21.1. All active nodes need to update to…
— THORChain (@THORChain) November 4, 2026
A 10 ETH deposit destined for one of THORChain’s vaults resided in the block that was discarded and therefore never confirmed on the canonical chain. THORChain’s observers had already recorded and credited the deposit.
When the associated swap failed to meet its price limit, the protocol’s refund mechanism issued a payment for funds the vault had never actually received.
The original deposit that remained on Ethereum’s accepted chain was subsequently refunded as well, producing a net shortfall of 10 ETH.
THORChain’s automated solvency checker detected the discrepancy and halted Ethereum swaps.
Within approximately two minutes, node operators suspended outbound Ethereum transaction signing to prevent further outflows.
A subsequent vote by three nodes then paused activity across the remaining chains as a precautionary measure while developers examined the underlying logic.
The affected counterparty later returned the extra 10 ETH, restoring the vault’s balance.
In its explanation of the incident, THORChain observed that every node had detected the reorganization, yet the secondary verification step intended to reverse the now-invalid credit did not produce a conclusive result before finalization.
The protocol noted that, with the vulnerability now public, a similar sequence could theoretically be repeated during any future reorganization on an external chain: an actor could rebroadcast a transaction using the same nonce and receive funds from the vaults.
Emergency pauses can be initiated by three node votes and reversed by four counter-votes, a mechanism designed to balance rapid response with decentralized control.
Halting a chain does not transfer custody of assets to the operators.
The partial resumption reopened the highest-volume routes, including those involving Bitcoin and Ethereum.
Network status indicators confirmed trading and signing as operational on the reactivated chains while the three remaining networks continued to show restrictions. The price reaction in RUNE reflected the return of core functionality rather than any broader shift in market conditions.
