THORChain's $500M Surge Exposes Thin Line Between Privacy and Exploitation

THORChain's revenue and trading volume surged to new highs on September 25 and 26, respectively. The protocol generated approximately $382,000 in revenue, its highest single-day figure since April 25, with a trading volume of around $211 million, the second-highest since April 23.

However, this growth story took an unexpected turn when it was discovered that the surge was largely due to stolen funds from Bitget's $387.5 million hot wallet breach being routed through THORChain's cross-chain pools as the attacker worked to convert and launder the proceeds.

Bitget CEO Gracy Chen publicly asked THORChain to refuse service to the addresses linked to the hack, stating that 'decentralization is a design principle, not a shield for facilitating known stolen funds.' However, THORChain's response was to defend its permissionless design, likening it to Bitcoin and Ethereum.

Security firm GoPlus pushed back on this comparison, pointing out that THORChain's vaults are controlled by its validator set, which retains the ability to block or reverse transactions, unlike Bitcoin or Ethereum where private keys sit entirely with users. SlowMist's founder Yu Xian also noted that decentralization 'is not a slogan' and shouldn't be used as an excuse for refusing to intervene in industry security incidents.