From TokenPost · · 40s
THORChain Vault Payout Flaw
THORChain warns reorg flaw could trigger repeat vault payouts.
In brief
THORChain warns reorg flaw could trigger repeat vault payouts. THORChain's reorg flaw risks repeat vault payouts after a failed ETH swap left a vault 10 ETH short. Originally reported by TokenPost.
THORChain reorg warning
THORChain warned a reorg flaw could let someone use a replacement transaction with the same nonce to collect funds from vaults on another chain.
“A malicious actor could perform a new transaction with the same nonce and would be paid funds by the thorchain vaults”
Oct 31 ETH swap failure
At 7:34 a.m. et (11:34 utc) on oct 31, ethereum’s history shifted back one block, removing a deposit thorchain had already recorded.
Vault solvency restored
The user returned the 10 eth, restoring the vault’s solvency while developers worked on fixes.
The takeaway
THORChain's reorg flaw risks repeat vault payouts after a failed ETH swap left a vault 10 ETH short.
