MEMPOL!TICS
← BACK TO THE BOARD
MaximalistMon Nov 2 · 9:10 AM ET · THORChain X notice Nov 1, 2026; THORNode API (inbound_addresses, lastblock, vaults, nodes); mempool.space; blockstream.info; FBI Cyber Alert Oct 31, 2026; Cointelegraph

THREE NODE VOTES HALTED THORCHAIN’S BITCOIN SWAPS OVER AN ETHEREUM BUG — IT LAST READ BLOCK 974,005 — ITS VAULTS HOLD 248 BITCOIN, THE 19 ADDRESSES THE FBI WANTS BLOCKED HOLD 18,270

On October 31, 2026, the FBI urged “THORNode operators” and other crypto businesses to “block transactions with or derived from” 628 addresses tied to the Binance theft, 19 of them bitcoin. The same day, THORChain stopped swaps on ten chains, bitcoin included. THORChain’s November 1 notice blames something else: a one-block Ethereum reorg at 11:34 UTC made a vault pay out 10 ETH it never received. The notice doesn’t mention the FBI.

Look at how little it took. “All chains were then halted by three node votes as a precaution,” THORChain wrote. Its own node list shows 111 active nodes. Three votes can stop a chain, four can undo that, and five can undo the undo. THORChain adds: “Halting a chain does not give those nodes control of the assets.” True, the keys don’t change hands. But the door does close. “Nodes will decide to re-enable chains as they are deemed safe,” it says, with no date.

We read the chain. THORChain’s last observed bitcoin block is 974,005, mined at 18:27 UTC on October 31. At block 974,263 it was still there, 258 blocks behind. Its six bitcoin vaults hold 248.35 bitcoin on chain, while its ledger counts 247.10. The difference is one deposit of 1.25 bitcoin at block 974,089, the only one since it stopped reading, and it hasn’t been credited. The 19 addresses hold 18,270.2 bitcoin, about 74 times the vaults, and not one output had been spent at block 974,263. Pools refill as traders move coins in, so that ratio is a snapshot, not a ceiling.

Bar chart: bitcoin held at block 974,263 on Nov. 2, 2026. The 19 FBI-listed addresses hold 18,270.2; THORChain's six bitcoin vaults hold 248.35.

Chainalysis, quoted by Cointelegraph, said THORChain “just inadvertently delayed the laundering of a significant amount of funds stolen from Binance.” Maybe so, but none of that bitcoin has moved, so nothing has been stopped yet. What this shows is where a block can happen. Bitcoin made 257 blocks through all of it and nobody got a vote. The vote lives one layer up, with the people running the swap. Your own keys never had to ask them. At the time of this writing, bitcoin was $77,890.

READ THE CLAIM →
THORChain X notice Nov 1, 2026; THORNode API (inbound_addresses, lastblock, vaults, nodes); mempool.space; blockstream.info; FBI Cyber Alert Oct 31, 2026; Cointelegraph · MON NOV 2 · 9:10 AM ET

Terms in this story: Node