THORChain Halt Spurs Kraken Shift to Chainlink for Bitcoin Security
THORChain halted operations on May 15, 2026 after a suspected multichain exploit drained roughly $10.7 million to $11 million across at least four chains.
Summary
- THORChain halted operations on May 15, 2026 after a suspected multichain exploit drained roughly $10.7 million to $11 million across at least four chains.
- Kraken announced it will move kBTC and future wrapped assets exclusively to Chainlink CCIP, replacing LayerZero infrastructure.
- The incident highlights growing platform focus on secure interoperability solutions amid ongoing cross-chain trust concerns.
THORChain paused all trading and chain activities on May 15, 2026. Reports pointed to a suspected multichain exploit that drained between $10.7 million and $11 million across multiple networks. Teams spotted unauthorized withdrawals on supported chains right away.
Kraken responded by accelerating its migration of kBTC to Chainlink CCIP. The exchange dropped LayerZero for wrapped Bitcoin and new assets in development. Recent security events now shape cross-chain choices fast.
Context
Cross-chain protocols let users move assets between blockchains. They add risks when bridges or liquidity tools face attacks. THORChain runs as a decentralized liquidity protocol that supports native asset swaps without wrapping on every chain.
The May 15 halt tested user confidence. Reports of losses spread quickly across on-chain tools. Major platforms now feel pressure to pick proven interoperability stacks.
Kraken's move to standardize on Chainlink CCIP for kBTC shows a direct reaction to the exploit timeline. This shift favors verified messaging and security practices.
Details
Reports from CoinDesk and CryptoRank placed total losses in the $10.7 million to $11 million range. Activity showed up on at least four chains. THORChain opened a $10 million compensation portal shortly after pausing operations.
The exact exploit vector stays under investigation. No one has confirmed a specific vulnerability yet. Kraken confirmed the migration in an official announcement.
"Kraken is migrating to Chainlink CCIP as the exclusive cross-chain infrastructure."
The update covers kBTC and future wrapped assets. It removes LayerZero from the transfer path. Analysts note that wrapped Bitcoin security now depends on the chosen interoperability layer.
Chainlink CCIP adds extra verification steps. Kraken cited these steps as the reason for the switch.
"Kraken is migrating to Chainlink CCIP as the exclusive cross-chain infrastructure."
, Kraken official announcement (Kraken)
Reaction
Market participants tracked RUNE token price movements right after the halt. Reports showed a roughly 12 percent drop in early trading. On-chain data revealed rapid pauses across affected networks to limit further exposure.
Social Highlight · @CoinDesk · 2026-05-15
THORChain halts after $10M exploit. (link)
The episode reinforces platform-level caution around bridge selection. Exchanges and DeFi protocols keep evaluating options that cut single-point failure risks for wrapped assets.
The THORChain incident and Kraken's subsequent migration to Chainlink CCIP will likely influence other platforms evaluating cross-chain options for wrapped Bitcoin security in the weeks ahead.
