THORChain halts ZEC swaps after bug triggers RUNE bond deductions
譯文準備中，暫時顯示英文原文。查看英文原文
閱讀字級閱讀正文 ↓
載入圖片中
The incident underscores the inherent risks for node operators in decentralized networks, highlighting the importance of robust security measures.
Electric Coin Company / Wikimedia Commons (Public domain)
An outbound matching error slashed about 140 RUNE from 18 node operators, and native Zcash trading stays paused until the v3.21 upgrade around October 23
Mon 19 Oct 2026 · 13:25 EDT · 2 min read
In DeFi
Share
THORChain has kept native Zcash swaps halted after a bug in how the network matches outbound ZEC transactions triggered a vault slash, deducting about 140 RUNE from the bonds of 18 node operators, The Defiant reported on October 19, citing onchain records.
THORChain said the incident caused no loss of user or vault funds. ZEC trading will remain paused until the network’s v3.21 upgrade, which is scheduled for around October 23.
Fix bundled into v3.21 upgrade
THORChain v3.21.0 is set to activate at block 28,366,100, according to Tokenpost. Alongside the ZEC fix, the release is designed to restore Solana trading, which was disrupted by a new Solana transaction type.
The upgrade also fixes a bug that caused excessive network state growth and had paused limit swaps, repairs affiliate fee payments used by SwapKit integrators, and adds dynamic pricing for memoless-swap registration to curb spam. Remaining Monero fixes are planned for a later v3.21.1 release with no set date.
The crypto and markets news you actually need—every morning.
Daily. Free. Join 34,000+ readers across crypto, finance, and policy.
We respect your privacy. Unsubscribe anytime.
Halt comes weeks after ZEC launch
The slash hit one of THORChain’s newest integrations. The protocol launched a native ZEC liquidity pool in early October, letting users swap Zcash across chains without wrapped tokens.
The ZEC halt is one of several disruptions THORChain is addressing in v3.21. The same upgrade is intended to patch a vulnerability in the Rujira FIN contract that led node operators to pause THORChain’s app layer in late September.
The slash shows how THORChain’s bonded security model works in practice. Node operators post RUNE as collateral and absorb penalties when vault errors occur, which in this case shielded users from losses caused by a software bug.
Disclosure: This article was edited by Estefano Gomez. For more information on how we create and review content, see our Editorial Policy.
