THORChain Warns Reorg Flaw Could Trigger Repeat Vault Payouts

In a Nov. 1 warning, THORChain said the incident revealed a refund weakness that could let someone use a replacement transaction with the same nonce to collect funds from vaults on another chain. At 7:34 a.m. ET (11:34 UTC) on Oct. 31, Ethereum’s history shifted back one block, removing a deposit THORChain had already recorded. The swap missed its price limit. THORChain refunded the failed swap and also returned the sender’s original deposit, leaving a vault 10 ETH short. An automatic solvency checker halted ETH swaps.