A THORChain network halt is an emergency security mechanism designed to protect the protocol.
A halt is not a selective freeze of specific funds or an individual swap.
During the May 2026 exploit that resulted in $10.7M stolen from the liquidity pools, the attackers addresses were never blacklisted and therefore never prevented from swapping on THORChain.
THORChain is permissionless and doesn't censor by design. It's a neutral public good/tool as described by
@mperklin in the post below.