On July 23, 2021, THORChain's ETH Router was exploited when an attacker deployed a custom contract to trick Bifrost Protocol into accepting fake asset deposits, triggering refunds of real assets. The attacker limited impact and requested a 10% bug bounty, suggesting a white-hat teaching lesson.