THORChain has unveiled a recovery plan following the attack on May 15, with node operators now voting on Proposal ADR028. The plan involves using the protocol's own liquidity to absorb losses, with any remaining losses shared by synthetic asset holders. The exact allocation ratio is still under evaluation. The protocol's liquidity will be reduced to zero and replenished through system revenues, without minting or selling additional RUNE. Technical measures include retaining and patching GG20, with trading set to resume post-vulnerability fix and node rotation. Innocent nodes will be protected, while the attacker's nodes will be slashed. A bug bounty has been offered to the attacker for fund recovery, with the recovery plan adjusted if restitution occurs. Node operators are currently voting on the proposal's direction, with future adjustments possible via Mimir.