THORChain: UNE transfer expected to resume in 12 hours, attack may be due to GG20 TSS vulnerability According to a report by Golden Finance, on May 16th, THORChain released an update on a hacker attack on the X platform. Preliminary evidence suggests that a node that recently joined the network is suspected to be controlled by a malicious operator, who obtained the key information of the vault participants through the GG20 TSS vulnerability, ultimately rebuilding the vault private key and executing unauthorized withdrawal transactions. At present, multiple THOORChain nodes have been shut down, so the network is in a suspended state. It is expected to resume RUNE transfers in about 12 hours.