Security Disclosure and Patch for Trade Accounts Feature

馃敀 Vulnerability Patched, Update Incoming

By Thorchain
Apr 1, 2024, 5:47 PM
twitter
News article
Photo by Thorchain

A security vulnerability was discovered in a new Trade Accounts feature that could have been exploited by depositing multiple coins into the protocol.​ The development team has addressed this issue by invalidating such transactions.​ A patch is being prepared and will be released shortly, allowing nodes to update.​ As a precautionary measure, the protocol has a pause flag for various transaction types, including deposits, swaps, savings, and lending, which can be triggered by any node or Mimir for safety.​

Sources

The protocol dev team maintains open relationships with several security teams - as part of a multi-layer security approach. A security disclosure was made overnight that could have enabled a vulnerability on a new feature (Trade Accounts), by depositing multiple coins into the

Image
330
Reply
Read more about Thorchain

Nami Protocol Introduces yRUNE: A Yield-Bearing Token Solution

Nami Protocol announces yRUNE, a new yield-bearing product that combines $RUNE and $TCY tokens. The product automatically rebalances to maintain RUNE exposure while generating yield through TCY. TCY (THORChain Yield) is a revenue-sharing token that receives 10% of THORChain's system income. Key features: - Total supply: 210 million tokens - Initial value: $0.10 - Backed by real protocol revenue - Staking rewards paid in RUNE - No inflation mechanism The system represents a new passive income layer in the THORChain ecosystem, focusing on sustainable yield generation rather than inflationary tokenomics.

EDDSA Support for Solana Coming in v3.8.0

The upcoming v3.8.0 release is set to introduce EDDSA support for Solana ($SOL), marking a significant protocol upgrade. - Implementation timeline targets release after completion of final testing phase - Feature was initially announced on June 19th as part of v3.8.0 roadmap - Integration will expand cross-chain capabilities *Note: Final deployment timeline depends on successful completion of all testing procedures.*

RUJI Token Launch and Protocol Update

The RUJI token officially launches today, marking a significant milestone for the Rujira Network ecosystem. This follows the successful deployment of RUJI Trade and RUJI Pools earlier this month. Key updates: - RUJI token goes live for trading - Trading and liquidity pools operational - Initial asset selection limited but expanding - Protocol supports major cryptocurrencies including BTC, ETH, BNB, and Cosmos assets The platform continues to build infrastructure for decentralized liquidity provision across multiple blockchain networks.

THORChain Video Update

THORChain released its latest video update, continuing the series from previous releases in December 2024 and January 2025. The protocol maintains its focus on cross-chain liquidity and decentralized trading infrastructure. Key developments: - Enhanced swap functionality across BTC, ETH, BNB, and Cosmos networks - Improved liquidity provider features - Updated borrowing mechanisms The video demonstrates ongoing progress in THORChain's core mission of providing decentralized cross-chain infrastructure.

THORChain Upgrade Enhances App Layer and Node Operations

THORChain Upgrade Enhances App Layer and Node Operations

THORChain's latest upgrade delivers significant improvements across multiple fronts: - Enhanced App Layer flexibility allowing developers more freedom to build and scale - Improved safety and efficiency for THORNode operations - Streamlined developer workflow and enhanced user experience - Updated compatibility with Bitcoin and Ethereum innovations Recent data shows strong adoption metrics: - 30K+ active monthly swappers - 70% new users each month - Growing popularity among small-value transactions (<$1K) - Organic growth without protocol-level incentives The upgrade positions THORChain as both a cross-chain hub and DeFi foundation layer, setting the stage for expanded capabilities including lending, orderbooks, and perpetuals.