BlockBeats, citing a Chainalysis post, reported that an Ethereum chain reorganization triggered an emergency pause on THORChain and temporarily disrupted cross-chain swaps tied to funds stolen in the Binance attack.
How the pause was triggered
The report said the reorganization caused THORChain to issue a duplicate refund to a user who had deposited 10 ETH. The resulting emergency pause temporarily stopped cross-chain swaps, including activity associated with North Korean hacker groups, according to the Chainalysis account cited by BlockBeats.
Limits on what is confirmed
Chainalysis reportedly said attackers and other users could not swap through most of THORChain’s bridges before service resumed. BlockBeats also noted a joint call from the FBI, U.S. Secret Service and IRS Criminal Investigation for virtual-asset service providers to block addresses and flows linked to the Binance hack. The flash did not provide transaction hashes or an independent technical audit.
Source: BlockBeats English flash, published Nov. 1, 2026.