THORSwap issues bounty offer tied to more than $1M exploit of THORChain founder's wallet: onchain analysts
Quick Take THORSwap has issued a bounty offer following an exploit of a personal user’s THORChain wallet, which PeckShield valued at around $1.2 million. Onchain sleuth ZachXBT said the victim is likely THORChain founder John-Paul Thorbjornsen, who had $1.35 million stolen by North Korean hackers this week.

THORChain DEX aggregator THORSwap has made a series of repeated bounty offers to the exploiter of a user's personal wallet over the past few days, with the victim likely to be THORChain founder John-Paul Thorbjornsen, according to ZachXBT.
"Bounty offer: Return $THOR for reward. Contact contact @ thorswap.finance or THORSwap discord for OTC deal," the latest onchain message to the hacker on Friday morning reads. "No legal action will be taken if returned within 72 hours."
Blockchain security company PeckShield flagged the messages on X, initially suggesting the THORChain protocol itself had suffered an exploit of around $1.2 million. However, that post was subsequently corrected to confirm it was a user's personal wallet that had been exploited after clarification from the THORChain team. "This incident involved a user's personal wallet being exploited, and is not related to THORChain," the project said . "This is just a bounty requesting for return of stolen assets. No protocol (thorchain or thorswap) were exploited." THORSwap CEO "Paper X" added .
THORChain founder likely victim
Responding to PeckShield's post on X, onchain sleuth ZachXBT said the exploited wallet likely belongs to THORChain founder John-Paul Thorbjornsen, who had a personal wallet drained for $1.35 million by North Korean hackers on Tuesday.
The source of the attack came via a message from the hacked Telegram account of a friend of the THORChain founder containing a fake Zoom meeting link, Thorbjornsen acknowledged earlier this week. "Ok so this attack finally manifested itself," he followed up on Tuesday. "Had an old MetaMask cleaned out."
Thorbjornsen said the MetaMask wallet was only in another logged-out Chrome profile with its key stored in iCloud Keychain, yet attackers likely accessed one or both via a 0-day exploit — reinforcing his view that threshold signature wallets, which split key shares across devices, are the only real protection.
According to ZachXBT, the attacker stole approximately $1.03 million in Kyber Network tokens and $320,000 in THORSwap tokens. The theft address sent funds to the same " Exploiter 6 " address that the onchain bounty messages were sent to. The majority of the stolen funds, matching PeckShield's $1.2 million figure, currently sit at an address beginning "0x7Ab," seemingly swapped to ETH, ZachXBT noted on his official Telegram channel.
The Block reached out to Thorbjornsen for comment.
Disclaimer: The content of this article solely reflects the author's opinion and does not represent the platform in any capacity. This article is not intended to serve as a reference for making investment decisions.
You may also like
When Stablecoins Start Paying for the Network: The New Relationship Between Interest and Fees
This article explores the industry pain points caused by fluctuations in blockchain network fees and analyzes their causes. While the reserves of stablecoins earn interest off-chain, the operational costs of blockchains require users to pay high on-chain fees. This results in a mismatch between "income" and "expenses," creating a scissor gap.

Matrixport’s Cactus Custody partners with Singapore Gulf Bank (SGB) to upgrade compliant fiat custody and 24/7 instant access capabilities
This article reports on the collaboration between Cactus Custody, the compliant digital asset custody institution under Matrixport, and Singapore Gulf Bank (SGB). The partnership aims to provide institutional clients with compliant and efficient fiat custody and instant deposit and withdrawal services to meet the needs of connectivity between digital assets and traditional finance.


Tesla’s Next Chapter: Acquiring xAI?
An AI giant spanning both the digital and physical worlds, with a potential valuation reaching 8.5 trillion US dollars, is emerging.

Trending news
MoreCrypto prices
More








