THORChain v3.20 Pauses Churn After Three-Bug Chain Exploit Drains 20% TVL

According to co-founder Aaluxx, THORChain's vault rotation (churn) is now paused until v3.20 ships due to a consensus bug discovered during churning. The recent exploit stemmed from three chained older bugs that, individually harmless, became exploitable when triggered in sequence. One of five vaults was compromised, resulting in approximately 20% of total value locked being drained. The v3.20 release consolidates the original v3.19.4 patch with Monero integration and router V6 deployment.

Maya Protocol maintained swap processing throughout the entire month-long THORChain pause by running a single independently verified healthy vault. Monero integration has cleared chain-net testing and developer review, with a Least Authority security audit underway; the XMR pool will launch with shallow, protocol-owned liquidity and small test swaps. Moca, a crypto point-of-sale network settling through Maya and THORChain, is launching a quiet beta targeting the following Monday.