THORChain Under Fire for Processing Stolen Bitget Funds
Decentralized protocol faces industry scrutiny over handling of $387.5M hack aftermath.
1Bitget's $387.5M hack aftermath
Following Bitget's September 24 security breach, stolen funds totaling $387.5 million were routed to attacker addresses. The exchange confirmed the amount increased from initial $351.6 million after including Zcash and Tron assets. Bitget clarified the breach stemmed from a backend wallet system flaw, not compromised private keys. CEO Gracy Chen publicly requested THORChain to block these addresses on September 26, framing it as an industry responsibility issue rather than just Bitget's problem.
2Cross-chain laundering concerns
Security researchers identified 1,497 of 2,377 attacker addresses moving stolen funds through THORChain's cross-chain swap functionality. This follows patterns observed in previous hacks, including nearly $1.2 billion from the 2025 Bybit exploit. MistTrack researchers argue protocols must address their role in processing known stolen assets. The situation highlights how decentralized finance's permissionless nature creates challenges for asset recovery while maintaining censorship resistance.
3Protocol's decentralized defense
THORChain responded by comparing itself to Bitcoin and Ethereum, questioning why it should bear responsibility when other major chains wouldn't. The protocol emphasized its permissionless design principle, arguing that transaction screening would compromise its fundamental value proposition. This stance sparked debate about whether decentralization absolves protocols from ethical considerations regarding stolen fund flows.
4Security community backlash
Security researcher Taylor Monahan criticized THORChain's response, citing its history of seven hacks and alleged centralization issues. The debate extended to whether transaction screening constitutes censorship, with crypto enthusiast Joel Valenzuela arguing it differs from network halts. Ethereum advocate Marius Kjærstad involved Grok AI to fact-check claims, which confirmed three 2021 exploits worth $416M but found no evidence for North Korean developer allegations.
5Previous halt precedent
Critics pointed to THORChain's May 2023 network halt following a $10.7 million exploit, which lasted five weeks until June 22. Observers question the inconsistency between this action and current resistance to address Bitget's stolen funds. The Satoshi Club X account highlighted the apparent contradiction in pausing for internal issues while refusing external responsibility.
6Industry-wide implications
The dispute raises fundamental questions about decentralized protocols' obligations in combating financial crime. Bitget's case demonstrates how cross-chain functionality can complicate asset recovery, with stolen funds fragmenting across multiple networks. The situation tests the crypto industry's ability to self-regulate without compromising core decentralization principles.
7Exchange recovery efforts
Bitget implemented a 5% bounty program for frozen or recovered funds and coordinated with stablecoin issuers Circle and Tether to freeze $318,000. The exchange plans phased withdrawal resumption starting with Bitcoin on September 28. These measures contrast with THORChain's hands-off approach, highlighting differing philosophies about intermediary responsibility in crypto security incidents.
8Regulatory attention catalyst
The public dispute between a major exchange and decentralized protocol may attract regulatory scrutiny to cross-chain transactions. As security researchers document laundering patterns through DeFi protocols, the industry faces pressure to develop solutions that balance censorship resistance with anti-money laundering requirements. The outcome could influence future protocol designs and security standards.
Original article: CryptoPotato — THORChain Under Fire for Processing Stolen Bitget Funds