Historical replay · RUNE/USD

THORChain's Summer of Exploits: The RUNE Crash (July 2021)

In July 2021, THORChain — a cross-chain DeFi protocol — suffered a string of smart-contract exploits within days of each other. RUNE fell roughly 50% from peak to trough as the network repeatedly paused itself to contain the damage.

THORChain is a decentralized protocol designed to let users swap assets directly across different blockchains — Bitcoin for Ethereum, for instance — without relying on a centralized exchange or a wrapped-token bridge. In July 2021, within roughly a week, the protocol was hit by more than one smart-contract exploit, each draining funds from its liquidity pools, forcing the team to pause the network multiple times while investigating and patching the underlying bugs.

RUNE, the network's native token, fell from a close near $6.10 on July 13 to an intraday low of $3.01 by July 20 — a decline of roughly 50% from peak to trough within the same week the exploits were disclosed. The token partially recovered in the days that followed, closing near $3.99 by July 27, though it remained well below its pre-exploit level.

The episode is a real-world illustration of a specific DeFi risk category: a protocol can have a genuinely useful, popular product (cross-chain swaps, in THORChain's case) and still carry meaningful smart-contract risk that has nothing to do with its token's price action or market sentiment beforehand — the exploits weren't preceded by any warning sign visible on the price chart itself, only by the code being live and, as it turned out, imperfect.