TLDR
- RUNE traded near $0.64 on Wednesday, up about 15% in 24 hours, per CoinMarketCap.
- THORChain restarted swaps on 10 external networks after running its v3.21.1 update.
- Cosmos Hub, BNB Smart Chain and Solana remain halted with no reopening date.
- An Ethereum reorg on October 31 caused a 10 ETH double refund and triggered the pause.
- 14 active nodes had not yet installed v3.21.1 at the time of the restart.
THORChain (RUNE) was trading near $0.64 on Wednesday. That is up about 15% over the past 24 hours, according to CoinMarketCap.
The move followed a restart of trading on most of the protocol’s networks. THORChain announced it on X at about 02:01 UTC on November 4.
The network status page showed trading and signing marked “OK” on 10 of 13 listed external networks. BNB Smart Chain, Cosmos Hub and Solana still showed warnings.
RUNE Surges as THORChain Recovers From Ethereum Incident
Thorchain (@THORChain) Brings Most Swaps Back Online After Weekend Halt. THORChain's $RUNE token has climbed around 13.7% in 24 hours, trading near $0.63.
The protocol has restored swaps across 10 of its 13 listed… pic.twitter.com/f8JcxcXUaB
— BSCN (@BSCNews) November 4, 2026
Swaps are live again on Bitcoin, Ethereum, Bitcoin Cash, Dogecoin, Litecoin, Tron and Zcash. Avalanche, Base and the XRP Ledger kept running through the pause.
What Triggered the Halt
The pause began on October 31 at 11:34 UTC. Ethereum went through a one-block reorganization, and a 10 ETH deposit to a THORChain vault sat in the dropped block.
THORChain had already credited that deposit. When the related swap missed its price limit, the protocol refunded funds the vault never received, and the sender’s real deposit was refunded too.
An automatic solvency checker spotted the 10 ETH shortfall and halted Ethereum swaps. Node operators paused outbound Ethereum signing within about two minutes and stopped trading on nine more chains.
THORChain later said the recipient returned the 10 ETH. It also said the replay method behind the double refund is now public.
Chainalysis said on November 1 that the pause delayed the laundering of funds from the $6.3 billion Binance hack. The FBI has linked that theft to North Korean hackers it tracks as TraderTraitor.
On October 31, the FBI, the U.S. Secret Service and IRS Criminal Investigation asked node operators to block transactions tied to the theft. THORChain has no built-in way to block a single sender, and operators can only pause a chain or the whole network.
The v3.21.1 Update and Earlier Halts
The restart came after node operators began running v3.21.1. THORChain said every active node must install it to fix swap performance issues.
At the time of the announcement, 14 active nodes had not yet updated. THORChain is run by independent operators, so a release takes effect only as each one installs it.
This is not the first halt this year. In May, an attacker drained about $10.7 million from one Asgard vault, and trading reopened on June 23 after 39 days offline.
On September 28, THORChain declined a request from Bitget CEO Gracy Chen to block wallets tied to a $387.5 million hack. It cited its decentralized design.
Version 3.21 in October aimed to restore Solana and Zcash trading and patch an exploit in the FIN contract of Rujira, its app layer. Monero support was held back for v3.21.1.
THORChain said v3.21.1 gets it one step closer to launching Monero, with no date given. It has said Monero will start with a soft launch and shallow liquidity.
Cosmos Hub, BNB Smart Chain and Solana remain halted. THORChain gave no reopening date and has said nodes will re-enable chains as they are deemed safe.
