THORChain
Phishing on Jul 24, 2021 · Phishing attack
What happened
THORChain (RUNE), a decentralized cross-chain transaction protocol, claims that hackers airdrop UniH tokens to Ethereum addresses as bait to steal RUNE tokens in users' wallets. Hackers have airdropped UniH tokens with malicious contracts to at least 76,000 Ethereum addresses. Once receiving users sell their newly received UniH tokens (or even just approve the sale) on decentralized trading platforms such as Uniswap, the hackers will They can steal any RUNE tokens they have in their wallets. This is because the RUNE token uses a non-standard token contract called "tx.origin". According to Thorchain’s RUNE token contract code “Beware of phishing contracts that may steal tokens by intercepting tx.origin”, it knows that this type of attack may occur. In just a few hours, hackers have stolen USD 76,000 worth of tokens. currency.
Details
- Date
- Jul 24, 2021
- Kind
- Phishing
- Method
- Phishing attack
- How in
- Phishing and scams
- Target
- Bridge
- Chains
- not stated
Reported by
Related incidents
Thorchain founder exploited for $1.35 million 2025 · Hack or exploit · $1.4M
THORChain 2022 · Hack or exploit · undisclosed
THORChain DEX 2021 · Hack or exploit · $8M
THORChain DEX 2021 · Hack or exploit · $5M
SwanBluechip, "THORChain phishing, Jul 24, 2021: $76K lost", Crypto hack history, https://swan-hack-tracker.pages.dev/history/i/ht908476fecb/ (data as of 2026-10-31).