THORChain to Activate Security Upgrade on October 23
The v3.21 patch addresses a liquidity contract vulnerability, clearing the way for Rujira to resume trading and lending.
Updated on Oct. 21, 2026 in Cybersecurity
Live Poll
Do you trust the security of decentralized finance platforms that require manual service halts during exploits?
THORChain will activate the v3.21 software upgrade at block height 28,366,100 on October 23. The patch resolves a vulnerability in the FIN contract that allowed unauthorized movement of concentrated liquidity positions.
Why it matters
The upgrade is a prerequisite for the Rujira platform to restore its App Layer services. It effectively secures the underlying base layer to allow for the safe resumption of trading and lending operations.
The v3.21 upgrade utilizes a private binary to patch a FIN contract transfer vulnerability at the THORChain Base Layer. While one Rujira position was affected during the exploit, no user funds were lost.
The players
THORChain
A cross-chain liquidity network that provides the smart contract base layer for various decentralized finance protocols.
Rujira
A platform utilizing THORChain smart contracts to provide trading and lending services for digital assets.
The details
The exploit targeted the FIN contract, a decentralized exchange protocol that facilitates order-book style trading within the ecosystem. By leveraging a vulnerability in the base layer, an attacker could manipulate custom concentrated liquidity positions—defined as assets allocated to specific price ranges—to move them without ownership. The v3.21 update corrects the logic controlling these transfers to ensure position ownership is enforced.
Timeline
September 26: Rujira reported the incident and paused its App Layer.
September 27: Rujira updated the public on the patch process.
October 10: Rujira issued a warning regarding position liquidations.
October 15: Rujira announced a plan to request pause removal.
October 23: Projected date for block 28,366,100 upgrade activation.
The Tech Race
This deployment follows the established security protocol for correcting smart contract vulnerabilities within the THORChain ecosystem. It marks a critical milestone in the project's roadmap to harden its base layer against unauthorized position movement.
Rujira users should monitor their collateral status as the platform plans to re-enable services, with a proposed 24-hour grace period for borrowers before liquidations resume. The platform intends to restart lending and trading once the upgrade is finalized at block 28,366,100.
The takeaway
The protocol upgrade provides a necessary safeguard for decentralized lending markets to resume operation safely. Investors should track the network block height on October 23 to confirm the successful activation of the v3.21 binary.
Further reading
For broader trends in smart contract security, see Cybersecurity.
Live Poll
Do you trust the security of decentralized finance platforms that require manual service halts during exploits?
