THORChain Launches Recovery Plan for May 15 Attack; Node Operator Voting Live on Proposal ADR028

According to PANews, on May 22, THORChain announced its recovery plan for the May 15 attack, with node operator voting now live on proposal ADR028. The protocol will absorb losses first through its own liquidity reserves, with remaining losses shared by synthetic asset holders; specific allocation ratios are still under evaluation. The plan does not involve RUNE token issuance, sales, or holder dilution.

Protocol liquidity will be depleted to zero and replenished gradually through system revenues. Innocent nodes in the same vault as attackers will be protected, while attacker nodes face full slashing; recovered RUNE will be paired with recovered assets, with surplus destroyed. The protocol offers a white-hat bounty to attackers for fund recovery, with plan adjustments proportional to any refunds. Trading will resume after security patches are applied and node rotation completes.