← THORChainreviewed 2026-10-14 · 10 claims checked
Fact-check findings
What an automated fact-checker found when it re-read THORChain against the sources the page cites. Only the most recent review is shown.
Read this first
These findings are produced by an automated reviewer, and its results vary between runs: the same page, checked three times on the same day, came back with 15%, 20% and 34% of its claims disputed, mostly because each run extracted a different number of claims. Treat what follows as leads, not rulings.
“Disputed” means the reviewer could not reconcile the claim with the evidence it cited. It does not mean the claim is false. “Unverifiable” means no reachable source settled it either way.
Nothing here changes the page on its own. A proposed correction is applied only after a human moderator approves it; until then the page reads as it did when reviewed.
disputed
2 claimsThe reviewer could not reconcile the claim with the evidence it cited. This is a lead, not a ruling that the claim is false.
- #1[disputed][awaiting moderator]in section: May 2026 GG20 TSS Exploit
“attacker wallets identified by TRM Labs holding”
reviewerAttacker wallet holdings (3,443 ETH, 36.85 BTC, 96.6 BNB) were identified by TRM LabsThe holdings figures come from Arkham Intelligence per CoinDesk, not TRM Labs. TRM's post, as fetched, contains no balances.Proposed correction (not yet applied)attacker-linked wallets identified by Arkham Intelligence holding - #2[disputed][awaiting moderator]in section: Pre-Attack Funding Trail and Alleged Lazarus Group Nexus
“traced through THORChain according to Chainalysis”
reviewerChainalysis attributed the $1.2 billion / 85% Bybit-through-THORChain figureThe cited CoinDesk article does not attribute the $1.2B / 85% figure to Chainalysis.Proposed correction (not yet applied)traced through THORChain according to researchers cited by CoinDesk
unverifiable
4 claimsNo source the reviewer could reach confirms or contradicts the claim.
- #3[unverifiable][awaiting moderator]in section: Pre-Attack Funding Trail and Alleged Lazarus Group Nexus
“founder JP Thor/Thorbjornsen confirmed publicly that THORChain earned between $5 and $10 million from processing those funds”
reviewerFounder confirmed THORChain earned $5-10 million from Bybit-related fundsNot found in the cited CoinDesk piece. I did not check the other cited sources (MIT Technology Review, DL News). - #5[unverifiable][awaiting moderator]in section: May 2026 GG20 TSS Exploit
“The submission claims 12,847 wallets were impacted, though this specific figure could not be independently corroborated from primary sources accessed at the time of this investigation.”
reviewerReference to a 'submission' and a 12,847-wallet figure although the page has no accepted submissionsaccepted_submissions is empty, so the referenced submission is not on the page. The figure is uncorroborated and should arguably be removed by a human editor. - #8[unverifiable][awaiting moderator]in section: Prior Security Incidents (2021–2025)
“Combined 2021 direct losses were approximately $15.5 million across multiple incidents per SlowMist's analysis.”
reviewerCombined 2021 losses were about $15.5M per SlowMist and 2021 incidents are described as two exploitsNot independently checked. The $4.9M plus $8M figures sum to $12.9M; the SlowMist title refers to three attacks, so the total may include a third incident that the text does not describe. - #9[unverifiable][awaiting moderator]in the timeline
“RUNE token launches with pre-mined supply of 1.0 billion tokens”
reviewerRUNE launched June 19, 2019 with a pre-mined supply of 1.0 billion tokensNot verified. The page also gives a circulating supply of about 350M tokens in June 2026 without explaining the difference.
partially supported
1 claimThe cited evidence supports part of the claim but not all of it.
- #4[partially supported][awaiting moderator]in section: Team, Governance, and Pseudonymity
“a figure the protocol's own founder corroborated in the $5–10 million range”
reviewerFee estimate attributed to CoinDesk in one section and to Chainalysis in another; founder 'corroborated' the rangeThe Chainalysis $12M estimate is supported. The founder figure is unsupported by the cited source, and a $5-10M range is lower than, not corroborating, $12M.
confirmed
3 claimsThe cited evidence supports the claim as written.
- #6[confirmed][no action needed]in section: May 2026 GG20 TSS Exploit
“halting all trading, swaps, LP actions, and signing at block 26190429”
reviewerNetwork halted at block 26190429 and paused about 12-13 hours; RUNE fell 12%; about $10.7-10.8M drainedBlock height, pause duration, loss size and date match CoinDesk. TRM lists the nine chains. - #7[confirmed][no action needed]in section: May 2026 GG20 TSS Exploit
“Bitcoin (BTC address: bc1ql4u94klk265lnfur2ujk9p6uh52f2a8jhf6f37)”
reviewerAttacker addresses on BTC and EthereumAddresses match TRM's list. - #10[confirmed][no action needed]in section: Pre-Attack Funding Trail and Alleged Lazarus Group Nexus
“THORChain declined to permanently block heist-linked transactions despite requests from the FBI”
reviewerBybit hack of $1.4 billion in February 2025 and DOJ/FBI-related FBI request to THORChainSupported by CoinDesk. The word 'permanently' and the geographic-location rationale were not checked.
How this fits together. The reviewer reads the published page and its cited sources and records one finding per claim. A human moderator decides whether each proposed correction is applied; those decisions, and the score changes they cause, appear in the audit log. Earlier review runs are not shown here; only the latest reflects the page as it stands.