THORChain targets Rujira restart with v3.21 exploit fix around Oct 23

THORChain is preparing to switch Rujira back on. The protocol’s v3.21 network upgrade is designed to patch the vulnerability that froze Rujira’s App Layer in late September. If node operators sign off, trading, lending and automated trading services are expected to resume. The fix targets block height 28,366,100. That block is estimated to land on October 23, 2026, between 13:40 and 15:20 UTC. What broke, and what gets fixed The problem sat inside the Rujira FIN contract, part of THORChain’s App Layer. An exploit detected on September 26 allowed unauthorized transfers of a concentrated liquidity position. That position belonged to the Rujira team. The response came fast. On September 27, 2026, the App Layer was paused in coordination with THORChain node operators. No user funds were lost in the exploit, according to the findings. The v3.21 upgrade is the patch. Once it activates and node operators approve, the halted Rujira products are set to come back online. The upgrade also restores support for SOL and ZEC trading, limit swaps and bRUNE staking. The grace period gamble To address that, Rujira plans to request a conditional 24-hour liquidation grace period. It would apply to cre...