THORChain Governance — Comprehensive Overview
This page consolidates all governance activity from the THORChain Devs Discord: every ADR, chain halt, security event, node vote, exploit, chain-specific issue, and community governance debate. Data sourced via the inebotten selfbot on 2026-08-27.
For current live state, check /network#network-diagnostics. For dated incident and recovery context, see /governance.
At a Glance
Chain is currently halted at height 27,590,009 as of Aug 27, 2026 — see /network#network-diagnostics for live state.
| Key Metric | Value |
|---|---|
| Total ADRs | 24 |
| Active Votes | 6 |
| Chain Halt Status | Ongoing (height 27,590,009) |
| RUNE Price Context | ~$0.50 range |
| Active Validators | ~95 |
| ADR | Title | Date |
|---|---|---|
| 027 | WasmArbSlipMinBps to 0 | Aug 2026 |
| 025 | Move Dev Fund Address | Aug 2026 |
| 023 | Reserve Supply Restructure | 2025 |
| 022 | Per Block Swap Scoring | 2025 |
| 029 | Revenue Share (SwapKit) | 2025 |
ADR status totals: 17 passed, 3 pending/voting, 2 withdrawn, 1 draft.
Latest major incident: Full chain halt at height 27,590,009 (Aug 26-27, 2026) — block production stalled after Yevlec re-halt, chain frozen.
ADR Registry and Vote Tallies
| # | Title | Status | Tally | Mimir key / mechanism | Summary |
|---|---|---|---|---|---|
| 001 | THORChat | Not Passed | n/a | Rejected by community | Chat system proposal |
| 007 | Increase Fund Migration & Churn Interval | Withdrawn | n/a | Withdrawn before vote | Replaced by simpler refund (PR !2869) |
| 008 | Dynamic Outbound Fee Multiplier (DOFM) | Passed (close) | 58/85 = 68.2% (final) | VoteDOFM; needed supermajority, 10-day window | Dynamic outbound fees. Crossed 50% on day 4 (50/85), crossed 67% on day 10 |
| 009 | Reserve Income & Fee Overhaul | Partially implemented | n/a | NativeTransactionFeeUSD, NativeOutboundFeeUSD, EnableUSDFees | USD-fees code shipped 1.114.0 (Jun 2023) but EnableUSDFees never activated; Reserve Income section removed as "contentiously large" |
| 010 | Streaming Swaps | Passed | Default-pass | VoteStreamingSwaps | 5 bps swap fees |
| 011 | Lending | Passed | 63/86 = 73.3% (final, 1 dissent) | VoteLending; 7-day vote | TORdollar debt, 500M RUNE circuit breaker. Largest feature since MCCN |
| 012 | Scale Lending (Burn 60M RUNE, CR 200%) | Passed (close) | ~52% favor; votes removed | ADR012 | Burned 60M RUNE from standby reserve, lowered max CR from 500% to 200% |
| 013 | Synth Backstop | Passed (clear) | "Vote looks decided" — 1 dissent per channel | VoteSynthBackstop | Forced ejections vs haircuts for synth pools |
| 014 | Reduce Saver Yield Target | Passed (default) | Motion to Bypass, no dissent | VoteScaleSaversYield | Scaled down saver yield |
| 015 | Refund Synth Positions After Ragnarok | Passed (default) | Motion to Bypass, no dissent | VoteRefundSynths | ~24,601 RUNE refunded (46 addresses >10 RUNE) |
| 016 | Affiliate Fee Revenue Share | Passed | 72/100 = 72% (final) | ProtocolAffiliateFeeBasisPoints = 1200 | 12% protocol affiliate fee. Crossed 67% in 2 days |
| 017 | Burn System Income Lever | Passed mechanism, rate gridlocked | 0.01% initial; rate debate ongoing | SystemIncomeBurnRateBP | EIP-1559-style fee-burn lever shipped; rate setting is contentious |
| 018 | Core Protocol Sustainability | Passed (controversial) | Motion to Bypass with sunset clause | VoteSustainability | Heavy opposition from yeguls, proofofsteve, multipartite; 9R conflict-of-interest concern raised; passed only after sunset amendment |
| 019 | AutoBond | Pending | Discussion ongoing since 2024 | n/a (open) | RUNEPool-style bond mechanism |
| 020 | App Layer | Pending | Discussion ongoing | n/a (open) | AppLayer norms, non-compete |
| 021 | Marketing Budget | Voting | 5% fund vs 5% fund + 5% burn | ADR021 | Sponsored by two long-time node ops; $250k kickstart |
| 022 | Per Block Swap Scoring | Passed (default) | Motion to Bypass, no dissent | VotePerBlockSwapScoring | Bug-fix-flavored ADR; devs in consensus |
| 023 | Reserve Supply Restructure | Passed | 2/3 of active validator set required | ADR23 | Burned ~64.4M RUNE. Required supermajority due to tokenomics change |
| 024 | System Income to POL | Pending (problematic) | Vote stalled; champion stepped down | ADR024 | 4 possible implementation options, "rat's nest" of discussion |
| 025 | Move Dev Fund Address | Passed (default) | Motion to Bypass, no objection | ADR25 | Nine Realms dev fund → new multisig (sonofodin, aaluxx, mazze) |
| 026 | Dynamic Fee Model | Testing | n/a | EnableDynamicFees | 24h fee revenue adjustment |
| 027 | WasmArbSlipMinBps to 0 | Passed | n/a (follow-up to ADR-031) | WasmArbSlipMinBps = 0 | Removes min slip floor for Virtualization Strategy swaps |
| 028 | TSS Exploit Recovery | Active | n/a (recovery plan, not a vote) | ADR-028 docs (snippet 5992927) | Post-$10M exploit recovery |
| 029 | Revenue Share (SwapKit) | Passed (close) | 56/95 = 58.9% (final) | ADR029 | 12% rev share. Crossed 50% on day ~9, finished with razor-thin supermajority |
| 030 | Delegated Node Permissions | Voting | Open | ADR030 (1=approve, 0=against) | Per-node delegation registry |
| 031 | Rujira Long-Term Alignment | Passed (Option 1) | Option 1 won (joint venture) | ADR031 (1=JV, 2=limited, 3=discontinue) | 33/33/34 split; secured-asset cap 20% |
| 032 | Limit Orders | Draft | n/a (not yet voting) | n/a | Base-layer resting liquidity (post-only, Trade Assets v1) |
Tally column key: "Passed (close)" = within ~10% of the rejection threshold or required explicit campaigning. "Passed (clear)" = comfortable supermajority. "Passed (default)" = Motion to Bypass with no dissent. "Passed (controversial)" = passed procedurally but with significant opposition in the commentary period.
This section breaks down every ADR by how it passed (or didn't) — which ones were genuine nail-biters, which ones sailed through, and which ones only passed because a Motion to Bypass avoided a formal vote.
Clear Winners (>70% support, little controversy)
- ADR-011 Lending — 73.3% (63/86, 1 dissent). "The biggest, and most difficult feature since MCCN." Even with 86 active validators, only one node voted against. Lending took nearly a year from inception to launch, and node operators were urged to vote explicitly because the community "will interpret a lack of vote as being apathetic."
- ADR-016 Affiliate Fee — 72% (72/100). The cleanest large-validator-set win in the archive. Reached supermajority within days, finished with 28 explicit dissents (all zeros, no commentary relays).
- ADR-008 DOFM — 68.2% (58/85) — close-but-comfortable. Passed the supermajority threshold on the last day of the 10-day window. The community had to publicly campaign for the last two votes ("We need two more votes from the nodes to pass adr 008. Any suggestions why they need so much time?") and ghostrider4486 was openly frustrated: "comon guys weak up and pass ADR 008!? devs please say something!"
Close Calls (passed but barely, or required active campaigning)
- ADR-029 Revenue Share (SwapKit) — 58.9% (56/95). The closest of the recent ADRs. Started the voting period needing active campaigning, with several nodes openly on the fence. SamYap and others ran a multi-week push ("Reminder for the NO to vote ADR029 (thanks SamYap) .. if there are any concerns to don't vote or vote against, it would be great to know why"). The YES vote only crossed 50% in the last days of the voting window.
- ADR-012 Scale Lending — ~52% in favor at one snapshot. This was the closest lending-related vote. Several nodes later removed their votes (climber2391: "It seems some nodes removed their vote towards ADR012. Is that right? Only 66 votes now. It used to be more than 70"). Vote decay and fatigue were real issues. Passed only because the 60M RUNE burn was bundled with the CR-200% change.
- ADR-031 Rujira Long-Term Alignment — Option 1 (JV) won, but voting fatigue noted. The vote request explicitly asked nodes to consider the recent $10M Asgard vault exploit and to choose a path forward. Option 1 was the strong consensus choice (sonofodin and aaluxx both endorsed it), but multiple commenters noted "voter fatigue" with simultaneous open votes (ADR-029, ADR-031, ADR-030, TORANCHOR mimirs all open at once).
Passed via Motion to Bypass (no formal vote — interpretive as "no one objected loudly enough")
These ADRs did not go through a make mimir vote. Instead, a contributor called a Motion to Bypass, which means the ADR takes effect after 7 days unless a node operator files an explicit make relay dissent. They are de facto unanimous but did not receive a positive vote of confidence.
- ADR-014 Reduce Saver Yield Target — pluto_x1: "Motion to Bypass succeeds. Devs will proceed to implement."
- ADR-015 Refund Synth Positions After Ragnarok — same, in the same hour.
- ADR-022 Per Block Swap Scoring — familiarcow: "Discussion on this ADR has been ongoing for ~1 month. Devs are in consensus. Will be calling a motion to bypass a vote."
- ADR-025 Move Dev Fund Address — _sonofodin: "I expect there to be no resistance here, imo." (prophetic — none came).
Contested / Controversial (passed but with significant opposition)
- ADR-018 Core Protocol Sustainability. Procedurally a Motion to Bypass, but with strong public opposition from yeguls, proofofsteve, multipartite, and others. The core concerns: (1) conflict of interest — 9R-controlled nodes would be voting on 9R's own funding; (2) ADR framework is not a funding framework; (3) the proposal was too centralizing; (4) Monero-style Community Crowdfunding System was proposed as a counter. The ADR was amended to add a 3-year sunset clause before passing. This was a hard-won compromise, not a clean win.
- ADR-017 Burn System Income Lever. The mechanism passed, but the rate has been gridlocked ever since. Current vote (Aug 2026): 5% — 35/95 (36.8%); 2.5% — 4/95 (4.2%); 1% — 25/95 (26.3%); 0.01% — 1/95 (1.1%). No single value has a supermajority.
- ADR-009 Reserve Income & Fee Overhaul. Procedurally passed, but the Reserve Income section was removed before passage as "contentiously large (may be addressed in a separate ADR)." The remaining USD-fee code shipped but
EnableUSDFeeswas never set, so the protocol still uses RUNE-denominated fees. This is a de facto partial implementation.
Rejected / Withdrawn
- ADR-001 THORChat — not passed. Merged as a proposal in 2022 but never received node support. The chrisgrc ADR audit from 2024-08-06 still lists this as "the only one [not passed] that has been merged as an ADR doc."
- ADR-007 Increase Fund Migration & Churn Interval — withdrawn. _sonofodin argued the proposal "utilizes the churn and migration which have their own purposes to solve a problem that is unrelating" and that the same problem was better solved by a refund PR. pluto_x1 agreed: "ADR 007 withdrawn. Alternative 1 is being pursued instead."
Pending / Stuck Votes (as of Aug 2026)
- ADR-019 AutoBond. Open since 2024. moonmonkey_666: "Same solution: ADR 019" has been the punchline in dozens of debates about passive RUNE holders and bond providers, but no formal vote has been called.
- ADR-020 App Layer. Active in discussion, no formal vote.
- ADR-024 System Income to POL. "Rat's nest of discussion" per runetard. The vote is structurally unclear: "ADR024 > 1 = Yes — but yes to what? There are 4 possibilities as to how a Yes vote can be implemented." The original champion (cow) stepped down; boonedub took over. The discussion has stalled.
Chain Halts and Major Incidents
| Date | Event | Severity | Impact |
|---|---|---|---|
| Aug 29, 2026 | Global CosmWasm Halted by Dev | Major | Dev484 halted all CosmWasm; only Yevlec was previously halted |
| Aug 29, 2026 | SOL Unhalt Announced | Moderate | Requires archival RPC + scanner bump; XRP/SOL disabled from virtualization strategy |
| Aug 29, 2026 | BSC Voting to Unhalt | Moderate | itzamnamaya voted; awaiting 2-3 more votes |
| Aug 28, 2026 | Trading Fully Resumed | Minor | All chains trading; BASE/BSC/SOL still paused |
| Aug 28, 2026 | Block Production Restored | Minor | Chain producing blocks after v3.20.1 + snapshot restore |
| Aug 28, 2026 | Consensus Timeout Adjustment Required | Major | Nodes needed THOR_TENDERMINT_CONSENSUS_TIMEOUT_*_DELTA=1ms |
| Aug 27, 2026 | v3.20.1 Released (Bifrost Non-Deterministic Fix) | Major | Fixed non-deterministic path that caused halt |
| Aug 27, 2026 | Old Distro Refunds Resurfaced | Minor | May 2026 halt refunds finally executing |
| Aug 27, 2026 | Yevlec Re-halt + Chain Freeze | Critical | Chain frozen at height 27,590,009; resolved Aug 28 via v3.20.1 + snapshot |
| Aug 26, 2026 | SOL Scanner Stuck Weeks Back | Moderate | 25 nodes scanners ~430.5M vs tip ~434.77M |
| Aug 26, 2026 | Bifrost 3.20.0 Legacy Keyshare Recovery Loop | Major | Pruned thornodes stuck fetching keyshares |
| Aug 26, 2026 | Asgard Vault Exploit (~$10.7M) | Critical | Triggered ADR-031 vote |
| Aug 25-26, 2026 | BASE Daemon + THOR Pool Issues | Major | 1/3 of fleet stuck; Bifrost 3.20.0 recovery loop |
| Aug 25, 2026 | v3.20.0 Seed Phrase Validation Break | Major | Enforces 24-word BIP39, crash-looping 12-word nodes |
| Aug 24-25, 2026 | v3.20.0 Upgrade | Major | Trading halted; THOR pool stuck at $5K/$5K |
| Aug 24, 2026 | Memoless Transactions Disabled | Moderate | Spam resumed after re-enablement |
| Aug 23, 2026 | v3.20.0 Upgrade Announced | Moderate | Non-coordinated, 24h urgency |
| Aug 22, 2026 | Dynamic Fee Experiment Failures | Moderate | Symbiosis zero volume; ShapeShift 5.8% vs Chainflip 54% |
| Aug 22, 2026 | Frozen Savers Writedown Waterfall Issues | Major | Tranche 2 abandons waterfall discipline |
| Aug 22, 2026 | Swap Queue Defects | Moderate | MRs !4807, !5012, !5020 |
| Aug 21, 2026 | Memoless Registration Halted | Moderate | ~15,500 spam slots; registration halted |
| Aug 19, 2026 | Wasm Gas Consensus Failure | Critical | Height 27,489,428; 22 nodes crashed |
| Aug 19, 2026 | TRON Node Lag (Network-Wide) | Major | 20% of nodes out of TRON consensus |
| Aug 19, 2026 | XRP Inbound Stuck 100+ Days | Moderate | Swap stranded at 57/95 observations |
| Aug 18, 2026 | CCL Edge Case | Minor | Alerting triggered, fix deployed |
| Aug 17-21, 2026 | Maya Exploit — 20 BTC + $300k | Critical | ~$1.7M lost; 6 bugs found, 2 in TC |
| Aug 17, 2026 | BASE Network Upgrade (Block 50094242) | Major | ~1/3 of fleet BASE daemons halted |
| Aug 17, 2026 | Lawsuits Against Core Devs | Major | Lawsuit for Savers/Loans losses |
| Aug 13, 2026 | Yevlec Gas Griefing | Major | Unmetered arb contract burning 99.7% of block gas |
| Aug 12, 2026 | Inactive Vault Recovery (Stranded Funds) | Moderate | 3,024 ATOM + 29 SOL stranded |
| Aug 7-12, 2026 | CALC Finance Block Time Degradation | Moderate | 575ms/1,386 offers before; 1.48ms/2 after |
| Aug 5, 2026 | Quote-Update Storm | Moderate | 93 consecutive txs; 795M gas for 19 changes |
| Aug 5, 2026 | Long Block Times + P2P Liveness Failures | Critical | FinalizeBlock 20.5s-40.1s; P2P peers 10 to 4 to 0 |
| Aug 2, 2026 | Gateway Inconsistency (UK Access) | Minor | gRPC loopback race condition |
| Jul 6, 2026 | Daemon Image Updates | Minor | BTC 29.1, Gaia 27.5.0, LTC 0.21.5.5 |
| Jul 3, 2026 | SOL Scanner + Observation Failures | Major | Non-archival RPCs; trading halted |
| Jun 21-26, 2026 | LTC/BSC Trading Halt | Major | LTC, BSC, SOL trading halted |
| Jun 1-3, 2026 | Mimir Votes | Minor | Multiple automated vote sessions |
| May 30, 2026 | Circle Blacklisting USDC Risk | Moderate | USDC risk when Monero or ZEC implemented |
| May 25, 2026 | MDMN Node Ban Vote | Major | Emergency ban vote against MDMN operator |
| May 19, 2026 | MDMN Node Ban Action | Major | BondSlashBan raised to 1M RUNE |
| May 18, 2026 | CEX Accounts Frozen for Node Operators | Major | Accounts frozen 1-2 months; regulatory investigations |
| May 15, 2026 | GG20 TSS Exploit | Critical | Single node exploited GG20; ~$10M lost; paused ~12h |
| May 9, 2026 | Inactive Vault / Swap Issue | Moderate | Front ends sending to inactive vaults |
| Apr 25, 2026 | LTC Reorg Attack | Major | 13-block reorg; 10 LTC double-spent |
| Apr 21, 2026 | CometBFT CVE-2025-24371 Incomplete Fix | Moderate | Malicious peer can deadlock syncing nodes |
| Apr 21, 2026 | TCY Payments Stalled | Moderate | TCY payments not processing |
| Apr 19, 2026 | Security Bounty Unpaid + Discord Ban | Moderate | Researcher waiting since Feb 2026 |
| Mar 31, 2026 | Solana Double-Spend Vulnerability | Critical | Churn blocked; BASE also paused |
| Mar 31, 2026 | Solana Unhalt | Minor | Unhalted via v3.16.4 |
| Mar 23, 2026 | PauseLP Mimir Set (Pre-DLP) | Moderate | PauseLP for all chains except BASE |
| Mar 13, 2026 | v3.16 Regressions | Major | Multiple issues on day of adoption |
| Mar 5, 2026 | v3.16 Mainnet Upgrade | Moderate | Non-coordinated; ZCash added; regressions |
| Mar 3, 2026 | Pause Drill Completed | Minor | Excellent response time |
| Feb 27, 2026 | Solana Scanner Inflation Bug | Major | Fixed in 3.16.0 |
| Feb 26, 2026 | Trade Asset Balance Reduction | Major | Price deviations from balance reduction |
| Feb 26, 2026 | Solana Chain Halt | Major | Trading halted; unhalted ~Mar 31 |
| Feb 19, 2026 | BTC LP Withdrawals Paused | Major | Synth liability >100% |
| Feb 6, 2026 | TRON Outbound Queue Uncontrolled | Major | Spam stuck; SwapKit disabled TRON |
| Jan 21, 2026 | v3.15 Mainnet Upgrade | Moderate | BCH/P2SH patches; store migration fixes |
| Jan 13, 2026 | BCH Trading Paused (P2SH Bug) | Major | P2SH outbounds sent to wrong addresses |
| Jan 12, 2026 | LP & Churn Paused (Bug Bounty) | Major | Nodes proactively paused LP, Churn |
| Dec 23, 2025 | Pause Drill | Minor | 11-minute response |
| Dec 18, 2025 | BCH Streaming Swap Queue Fairness | Moderate | Whale bots reserve entire swap amount |
| Nov 18, 2025 | DigitalOcean Outage Impact | Minor | THORNode infra affected |
| Nov 15, 2025 | TSS Signature Pairing Vulnerability | Critical | P0/P1 double-spend; fixed in 3.12.2 |
| Nov 15, 2025 | UTXO Bifrost Exploit Disclosure | Critical | All UTXO chains paused; fixed in 3.12.2 |
| Nov 10, 2025 | Vault Cleaned for Stuck ETH/GAIA Tokens | Moderate | Vault cleaned and retired |
| Nov 4, 2025 | Consensus Issue on Re-Sync | Major | Required THOR_API_QUOTE_MAX_LAG=96h |
| Nov 4, 2025 | Bifrost v3.12 Config Crash | Major | Missed config crashed all Bifrosts |
| Oct 24, 2025 | TCY Treasury Data Stuck | Moderate | Treasury-owned TCY stuck at 1.96% |
| Oct 9, 2025 | Stuck Swap Requiring Store Migration | Major | Swap stuck, store migration needed |
| Oct 9, 2025 | Funds Stuck in Outbound (BSC) | Major | User funds trapped in outbound queue |
| Oct 7, 2025 | Node Stuck After v3.12.0 Upgrade | Major | Wrong AppHash; silently stuck |
| Oct 7, 2025 | NineRealms Consensus Failure | Critical | Querier fix caused consensus failure; ~5h recovery |
| Oct 6, 2025 | XRP CEX Swap Refund Issue | Moderate | Best-effort refund minus fee |
| Oct 6, 2025 | Streaming Swap Refund Behavior Change | Moderate | Refund events not emitted properly |
| Oct 6, 2025 | Limit Orders Enabled/Disabled Twice | Major | Enabled, disabled, re-enabled, re-disabled |
| Oct 4, 2025 | Manual Memo Failed | Moderate | Pool-not-found error |
| Oct 2, 2025 | BASE Node Memory Explosion | Major | Daemon using 68G vs 24G request |
| Oct 2, 2025 | BCH Wallet Balance Retrieval Bug | Moderate | Cannot retrieve wallet BCH balance |
| Oct 1, 2025 | TRON Scanner Falling Behind Repeatedly | Major | Bifrost bottleneck cycle |
| Jul-Sep 2025 | make recycle Broken | Moderate | Cosmos operator changes broke make recycle |
| Sep 10, 2025 | Old Treasury Key Compromise | Critical | Machine exploited via Zoom; migrated to Vultisig |
| Sep 9, 2025 | Gaia Nil Block Crash Loop | Major | Nil blocks not handled correctly |
| Jul 15, 2025 | XRP Scanning Auto-Halt Flapping | Major | Bond slash triggered |
| Jul 14, 2025 | TRON Bifrost Crash Loop (Config Miss) | Moderate | Bifrost crash loop on TRON init |
| Jul 9, 2025 | Maintenance Mode Churn-Out Bug | Moderate | Node selected to churn out while signing |
| Jul 6, 2025 | XRP Double-Spend & Stuck Outbounds | Critical | Double-spend attempts; ~12h stuck |
| Jun 25, 2025 | BASE Hardfork Stall | Major | Daemons not on v1.1.1 stalled |
| Jun 23, 2025 | Midgard Interface Conversion Crash | Moderate | Type mismatch |
| Jun 3, 2025 | Double Sign / Slash Policy Change | Moderate | Slash changed from bond to point |
| Feb 27, 2025 | North Korean Funds / Sanctions Crisis | Critical | FBI involvement; ETH chain paused; frontends blacklists |
| Feb 19, 2025 | BTC LP Withdrawals Paused | Major | Synth liability >100% |
| Feb 2-3, 2025 | Prop 6: Convert Defaulted Debt to TCY | Moderate | Defaulted debt converted to TCY equity |
| Jan 28, 2025 | Admin Mimir Removal / PauseLoans Vote | Moderate | PauseLoans and BurnSynths set permanently |
| Jan 8-30, 2025 | THORFi Lending Insolvency Crisis | Critical | At ~$0.50 RUNE, ~$210M impact |
| Jan 7, 2025 | Base Gas Cost Bug (Stagenet) | Major | EVM Scanner underestimated Base gas |
| Jan 6, 2025 | v3.1.1 Released (Base Chain Integration) | Major | 24+ nodes not upgraded 24h+ after release |
| Jan 3-9, 2025 | MintSynths Disabled / Savers Halted | Moderate | Disabled prior to Base chain rollout |
| Dec 26, 2024 | Savers Negative APR Display Bug | Minor | Calc/display bug |
| Dec 22, 2024 | Lending New Loan Openings Halted | Moderate | Planned to reopen Q1 2025 |
| Dec 20, 2024 | v3.1.0 URGENT Upgrade | Critical | Ledger signing fix; dual mimir confusion |
| Dec 20, 2024 | Slashing System Acknowledged Broken | Major | Overhaul promised for 2025 |
| Dec 16, 2024 | Trade Halted Briefly | Minor | Resolved quickly |
| Dec 12, 2024 | v3.0.0 Upgrade | Critical | Cosmos SDK v0.45 to v0.50; ~5 hour halt |
| Dec 6, 2024 | v3.0.0 Stagenet Caught Consensus Failure | Major | Fixed before mainnet |
| Dec 3, 2024 | 7-Hour Jail for Keygen-Failing Nodes | Moderate | Standby nodes received 7h jail |
| Nov 15, 2024 | Immunefi Bug Bounty Dispute | Moderate | Critical vs High tier debate |
| Nov 7, 2024 | Mimir: Liquidity Lock Up Blocks | Minor | Reverted to default (DISABLED) |
| Nov 4-5, 2024 | BTC Signing Halted (Suspected Kraken) | Major | ~$10M+ swap; permissionless halting debate |
| Sep 27, 2024 | Single Node Pause Incident | Major | One node paused all of THORChain |
| Sep 5-6, 2024 | ATOM Chain Halted During Migration | Major | Migration prevented |
| Sep 4, 2024 | v2.135.0 Upgrade Halt | Major | Halt-height at block 17,562,000 |
| Aug 27, 2024 | Sandwich Attack POC Demonstrated | Moderate | Feasibility demonstrated; THORSec notified |
| Jun 3, 2024 | Exploit Script Published Online | Major | Published for others to use |
| Apr 11, 2024 | Bug Exploitation Active | Major | Active exploitation; urgent hotfix |
| Mar 28-Apr 20, 2023 | Critical TSS Vulnerability | Critical | Churn halted 3 weeks; Immunefi bounty |
| Jan 17, 2022 | DOGE Launch Mishap | Major | 4.8M DOGE stuck; price spiked to $0.82 |
| Jul 15, 2021 | HACK #3: Live ETH Attack (~$5M) | Critical | ~4,000 ETH extracted; Treasury covered |
| Jul 7, 2021 | HACK #2: ERC777/XRUNE (~$15M returned) | Critical | Whitehat returned minus bounty |
| Jun 28, 2021 | HACK #1: ETH Parsing Exploit (~$140K) | Critical | First major exploit; halted ~1 hour |
| Jun 24, 2021 | MKR Symbol Bug / Full Network Halt | Major | MKR hex bytes; ALL trading halted |
For historical events from 2021-2024, see the /governance page.
Chain-Specific Issues
XRP (Recurring Pain Vector)
- Jul 6, 2025: Double-spend, stuck outbounds, ~12h stuck outbound
- Jul 15, 2025: Scanning auto-halt flapping, bond slash triggered
- Oct 6, 2025: CEX swap refund issue
- Aug 19, 2026: Inbound stuck 100+ days (57/95 observations)
SOL (Scanner Wedges)
- Feb 27, 2026: Scanner inflation bug (fixed in 3.16.0)
- Mar 31, 2026: Double-spend vulnerability (churn blocked)
- Jul 3, 2026: Non-archival RPCs causing scanner wedges, trading halted
- Aug 2, 2026: SOL $170K swap stranded during pause
- Aug 26, 2026: Scanner stuck weeks back (25 nodes)
TRON (Outbound Queue + Scanner)
- Feb 6, 2026: Outbound queue uncontrolled, SwapKit disabled TRON
- Jul 13, 2026: TRON unhalt — solvency/migration issues (vault gas token split)
- Jul 14, 2025: Bifrost crash loop from config miss
- Oct 1, 2025: Scanner falling behind repeatedly (bifrost bottleneck)
- Aug 19, 2026: Network-wide node lag, 20% falling out of consensus
BASE (Hardfork + Memory)
- Jun 25, 2025: Hardfork stall at L2 block 47806543
- Oct 2, 2025: Memory explosion (68G vs 24G request)
- Aug 17, 2026: Network upgrade halt (~1/3 fleet stuck)
- Aug 25-26, 2026: Daemon recovery ongoing
BSC (Outbound Queue)
- Oct 9, 2025: Funds stuck in outbound queue
- Jun 21-26, 2026: Trading halted (solvency concerns)
- Aug 22, 2026: Stuck outbounds, disabled in 3.20.0 to clear vault
GAIA (Crash Loops)
- Jun 23, 2025: Midgard interface conversion crash
- Sep 9, 2025: Nil block crash loop
- Oct 8, 2025: Chain keeps going down
BTC (LP Bug + Signing Halt)
- Nov 4, 2024: BTC signing halted (suspected Kraken compromise, ~$10M+)
- Feb 19, 2025: LP withdrawals paused (synth liability >100%)
- Aug 25, 2026: maxfeerate unit mismatch (sats vs BTC/kvB) causing outbound delays
- Aug 25, 2026: 61 outbound BTC transactions queued simultaneously
DOGE (LP Writedown + Double-Spend)
- Historical: Double-spend slash incident
- Aug 22, 2026: LP position would lose ~80% under Tranche 2 MR
BCH (P2SH + Queue Fairness)
- Jan 13, 2026: Trading paused (P2SH outbound bug)
- Oct 2, 2025: Wallet balance retrieval bug
- Dec 18, 2025: Streaming swap queue fairness (whale bots)
LTC (Reorg + MWEB)
- Apr 25, 2026: 13-block reorg attack, ~$500 loss
- Aug 7, 2026: LTC MWEB memoless swap funds stuck (permanent loss, recovery would pose security hole)
Bifrost Scanner Resource Contention (Unsolved Pattern)
The most persistent unsolved issue across the fleet:
- TRON, BSC, and SOL all cycle through falling-behind and recovering in a linked pattern
- BASE daemon using 68G vs 24G request (no limit set)
- Non-archival RPCs causing SOL scanner wedges
- v3.20.0 ships forward-only scanner floor as band-aid (one-shot only — reverts on next empty block)
Regulatory and Legal Shadow
- Feb 2025: FBI involvement re North Korean funds. Protocol maintained permissionless stance.
- May 2026: CEX accounts frozen for node operators for 1-2 months, pulled into regulatory investigations.
- May 2026: Circle blacklisting USDC risk discussion (when Monero or ZEC implemented).
- Aug 2026: Lawsuits against core devs and THORChain entity for Savers and Loans losses.
- Ongoing: Tornado Cash precedent cited; developers facing charges.
Active Node Votes
| Vote | Status | Tally | Notes |
|---|---|---|---|
| ADR030 (Delegated Node Permissions) | OPEN | For/Against | Per-node delegation registry |
| MEMOLESSTXNCOST=200000 | OPEN | 2/3 required | Prevents free-registration spam |
| STREAMINGLIMITSWAPMAXAGE=5256000 | OPEN | 3 votes min | Limit swap lifetime: 3 days to 1 year |
| TORANCHOR (BSC-USDT, Base-USDC, TRON-USDT) | VOTING | ~50-54/95 each | Stablecoin anchor integration |
| SYSTEMINCOMEBURNRATEBPS | Gridlocked | 500: 35/95, 100: 25/95, 250: 4/95 | Burn rate debate (5% vs 1%) |
| POLRESERVESYSTEMINCOMEBPS | VOTING | 2000: 10, 750: 4 | POL share of system income |
| ADR029 (Rev Share) | Passed | 56/95 (58.9%) | SwapKit revenue sharing |
| ADR031 (Rujira Alignment) | Passed | Option 1 selected | Joint venture confirmed |
| HALTWASMGLOBAL | DEBATED | 0 (not halted) | Global wasm halt status debated; only Yevlec was halted |
| WasmArbSlipMinBps=0 | Passed | Follow-up to ADR-031 | App-layer arb friction reduction |
Revenue and ADR-031
ADR-031 Deep Dive: THORChain x Rujira
Nodes voted on the future relationship between THORChain and Rujira. Option 1 (joint venture) selected.
Revenue split: 33.33% THORChain, 33.33% RUJI stakers, 33.34% POL fund (50/50 owned by TC and Rujira).
WasmArbSlipMinBps set to 0: Removes minimum slip floor for Virtualization Strategy swaps.
POL Fund: DAO DAO 3-of-6 multisig. Deployed Aug 13, 2026.
Exploit responsibility: Smart contract exploits = Rujira. Base Layer exploits = THORChain. Secured Assets senior in compensation waterfall, capped at 20% of remaining POL.
Current Revenue Split
- 33.33% to THORChain
- 33.33% to RUJI stakers
- 33.34% to Rujira POL (50/50 owned by TC and Rujira)
Treasury Situation (Aug 18 report by cryptomaze)
The 5% dev fund does not cover chain operating costs. Treasury covered a $617k quarterly shortfall. Monthly costs reduced by ~$70k.
Active Debates
Burn rate: Proposals to reduce from 5% to 1% to redirect more to dev fund/POL. Gridlocked.
POL allocation: 7.5-20% of system income debated. Base-layer POL generates ~37% APR vs Rujira less than 10%.
Revenue share timing: Whether pre-ADR31 revenue should be grandfathered under old terms.
Governance Process
Node Operator Governance Philosophy
Slambammer (Jul 27): "Node operators are the network governors." Proposed slashing nodes for not voting.
Dhc (Aug 20): "In a bull market node operators get all the upside and holders get scraps."
App Layer vs Base Layer Tension
Olegpetrov (Aug 26): "Recurring incidents of app-layer updates/code degrading or halting mainnet."
Hb1001 (Aug 26): Don't think value (revenue) of Rujira currently weighs up against the lost revenue, trust and dev effort when these keep happening.
Open Source vs Security Debate (Post-Maya Exploit)
frenchy4182 (Aug 20): "Having an open source project getting hacked multiple time would eventually be a dead project imo no?"
0xminato: "AI can find vulns based on x amount of miniscule bugs, something human eyes (apparently) cant find."
aaluxxmyth: "V3.20 will make Thorchain 100% open source again."
Codehans: AI-powered audit tool (GLM5.3 + Qwen3.8) finding vulnerabilities. .pfc ran AI audit against 3.18 codebase.
App Layer vs Base Layer Tension (Aug 27-29): erudite0545: "We are using a situation caused by an issue with the Base Layer to bash Rujira and our products/contracts... the contract wasn't the issue, as was also confirmed by Itzamna and Aaluxx. The Base Layer was." 5M RUNE locked in bRUNE contracts. 3-month v3.19→v3.20 gap criticized.
Halt Documentation Request (Aug 29): sourov: "I'd like the Rujira team to document exactly what each halt does and how it affects users at the app layer." Nodes need to understand consequences of each halt type.
CosmWasm Halt Controversy (Aug 29): devel484 halted global CosmWasm. koitsu challenged: "HALTWASMGLOBAL is 0 (not halted), and HALTWASMCONTRACT-YEVLEC is 1 (halted)." erudite0545: "The amount of pushback they would get if they decided to unhalt it after you halted it... there's now enormous weight on the decision for a Node to unpause."
Churn Priority (Aug 29): Nodes need churn to get paid; some running out of cash after months without churn. cryptoactuary: "Priority one is to get Churns back - no churns, no party."
Governance Mechanism Issues
Voter Fatigue: Multiple simultaneous votes overwhelming node operators.
Non-Participation Penalties: Active discussion about churning nodes with highest slash points.
Process Documentation: MRs unilaterally closed without Approver set consensus. Concern about single-dev dependency.
Slashing System Broken (Dec 20, 2024): pluto_x1: "Tbh slashing seems completely broken." Promised overhaul for 2025.
Churn Interval Gridlock (Jan 2024): pluto_x1: "General lack of consensus on extending from 3 to 7 days." Tension between decentralization and business relationships.
Multipartite MR Conflict (May 2025): MRs "suddenly unilaterally closed." Repository membership revoked by "any single dev with a sufficiently powerful Role."
Immunefi Bounty Arbitration Dispute (Jul 2024): pluto_x1: "Immunefi team made changes to our bounty program without our knowledge... requesting a payout for something we never authorized."
Burn vs Dev Fund Debate (Jul-Aug 2026): _sonofodin: "The burn does very little for the token outside of human psychology." thorfocus: "Lowering the intrinsic value of the asset and affecting the entire system negatively."
ADR-025 Dev Fund Migration (Mar 2026): _sonofodin: "Migrate the dev fund from 9R controlled address to a multisig controlled by myself, aaluxx, and mazze."
Nine Realms Departure (Mar 2026): ronanarc: "Nine Realms will be gradually stepping back from our active roles." Infrastructure handoff to Liquify and Maya teams.
Treasury Front-Running (Jul 2026): nipseyhodl: "People are actively front running the Treasurys buys so most of the time the protocol is not spending to defend the backing."
Rujira Trust Deficit (Jul 2026): erudite0545: "Integrators not enthusiastic about RUJI due to ongoing drama, chain issues, and exploits."
Monero Launch Controversy (Aug 2026): erudite0545: "Lets YOLO Monero to Mainnet. Who cares if it is full of bugs." aaluxxmyth: "Dev team has retained Least Authority for an audit..."
koitsu Exit (Jul 2026): Long-standing community member departing TC participation except anti-scam work.
GG20 Decoy Theory (May 2026): whysideas: "Is it being considered that the hacker used the obvious GG20 exploit as a decoy to coverup for how they actually exploited the protocol?"
Mimir Reference
Emergency Halts
| Key | Value | Purpose |
|---|---|---|
| HALTWASMCONTRACT-YEVLEC | 1 | Emergency halt of gas-burning arb contract |
| HALTSOLTRADING | — | Temporary SOL trading halt |
| HALTCHURNING | — | Churn halted pending 3.20.0 |
Security Parameters
| Key | Value | Purpose |
|---|---|---|
| BondSlashBan | 1000000 | MDMN node ban (raised from 5K) |
| PauseOnSlashThreshold | 100 | ETH gas spike auto-halt trigger |
| MEMOLESSTXNCOST | 200000 | Prevent memoless registration spam |
Economic / Revenue
| Key | Value | Purpose |
|---|---|---|
| SYSTEMINCOMEBURNRATEBPS | 500/100/250 | Burn rate debate |
| POLRESERVESYSTEMINCOMEBPS | 2000/750 | POL share of system income |
| WasmArbSlipMinBps | 0 | App-layer arb friction |
Governance Votes
| Key | Value | Purpose |
|---|---|---|
| ADR030 | 1/0 | Delegated node permissions vote |
| ADR031 | 1/2/3 | Rujira alignment vote |
Chain-Specific
| Key | Value | Purpose |
|---|---|---|
| TORANCHOR-BSC-USDT | 1 | Enable BSC-USDT anchor |
| TORANCHOR-BASE-USDC | 1 | Enable Base-USDC anchor |
| TORANCHOR-TRON-USDT | 1 | Enable TRON-USDT anchor |
| ConfMultiplierBasisPoints-LTC | 1000 | LTC reorg response (10x tightening) |
| MAXCONFIRMATIONS-LTC | 60 | LTC inbound confirmation time |
| STREAMINGLIMITSWAPMAXAGE | 5256000 | Limit swap max lifetime (~1 year) |