THORChain disclosed a reorg refund vulnerability that could allow attackers to reuse nonces following any chain reorganization and drain funds from its vaults. The flaw, now publicly known, poses an ongoing risk to the protocol's cross-chain liquidity pools. The team confirmed that 10 ETH double-paid during the incident has since been recovered. THORChain continues to monitor the situation as the exploit vector remains theoretically accessible until a fix is deployed.