How Does THORChain Work?

Native asset cross-chain AMM pools paired against RUNE as the settlement asset

THORChain's CLP model requires all pools to pair against RUNE, creating a universal settlement layer for cross-chain swaps. Unlike wrapped-asset bridges, THORChain swaps native assets directly. This is novel at the cross-chain level.

Bifrost bridge module connecting native chains (BTC, ETH, BSC, AVAX, DOGE, etc.)

Bifrost monitors external chains via threshold signature scheme (TSS) vaults. Nodes observe deposits on source chains and execute swaps on THORChain. This multi-chain native asset bridge is architecturally novel but has been exploited three times.

Node operators bond RUNE at 1.5x the value of pooled assets to secure the network

Incentive Pendulum: node bond must exceed pooled asset value by 1.5x. If bonded RUNE drops below threshold, the system incentivizes more bonding. This economic security model is unique to THORChain.

THORFi lending: burn RUNE to originate loans, mint RUNE on closure

THORFi loans burn RUNE on origination and mint RUNE on closure. If RUNE depreciates between origination and closure, more RUNE is minted than burned, creating inflationary pressure. Program was paused in Q1 2025 with $200M in liabilities.

Single-sided yield savers with leveraged LP exposure

Savers deposit single assets and earn yield from swap fees. However, the program introduces leverage into liquidity pools, amplifying impermanent loss during RUNE underperformance. Paused alongside THORFi lending.

5% swap fee burn creating deflationary pressure on RUNE supply

A portion of swap fees are burned, creating deflationary pressure when volume is sufficient. During low-volume periods, the burn is negligible relative to any inflationary pressures from THORFi.

Node operator consensus for protocol upgrades and emergency halts via mimir keys

Governance is conducted through node operator consensus rather than token holder voting. Nodes can vote to halt chains, adjust parameters, or approve upgrades. This was tested during the Bybit/Lazarus controversy when some nodes tried to halt ETH trading.

Slip-based fees that increase with trade size relative to pool depth

Swap fees scale with the size of the trade relative to pool depth, creating higher costs for large trades. This protects LPs from adverse selection but creates execution cost uncertainty for traders.

THORChain's permissionless cross-chain swaps were used to launder $1.4B in Bybit/Lazarus stolen ETH into BTC. The protocol's inability or unwillingness to block illicit flows creates existential regulatory risk that could result in RUNE delisting from major exchanges.

Bifrost must correctly observe and validate transactions across 7+ heterogeneous blockchains. Each chain adds a unique attack surface. Three exploits in 2021 (~$16M total) demonstrated that Bifrost is the weakest link in the architecture.

Threshold signature scheme vaults must re-key when node operators join or leave. During churn, vault security is temporarily reduced. An attacker timing an exploit during churn could exploit the reduced threshold.

Node operators disagreed on whether to halt ETH trading during the Bybit laundering event. Some nodes halted; others overrode. This governance failure demonstrated that the emergency halt mechanism is unreliable when operators have conflicting interests.

THORFi loans mint more RUNE on closure when RUNE price has declined, creating a reflexive feedback loop: lower RUNE price -> more minting -> more supply -> lower price. This pattern mirrors the Terra/Luna spiral.