THORChain says it has identified the exploit route, patch due tomorrow

THORChain published its third incident update on Monday, saying the team now has a solid understanding of how the roughly $10 million exploit was carried out but is not yet ready to release technical details. The team said the attack vector does not appear to be linked to any currently known GG20 exploit, and it is still evaluating whether other GG20 implementations could face similar risk. A new release, version 3.18.1, is expected to be delivered to node operators tomorrow. How the lost funds will be addressed is still undecided and will be put to a community governance vote rather than a confirmed compensation plan. The network remains partially paused until nodes reach consensus on the recovery approach.