THORChain Won't Freeze $387M in Bitget Hack Funds. That's the Whole Point.
Hackers drained $387.5 million from Bitget on September 24 and started routing the loot through THORChain. The protocol's answer to freezing those addresses? A flat no. Here's why that fight matters more than the hack itself.
JUST IN: THORChain just told Bitget no. The cross-chain swap protocol won't blacklist the addresses tied to a $387.5 million hack, and that decision says more about crypto than the theft ever will.
How We Got Here
Rewind to May. THORChain paused itself over a $10 million loss. Read that again. The protocol that sells itself on being unstoppable hit its own brakes when the bleeding was in-house.
Now jump to September 24. Bitget got drained for $387.5 million. One of the biggest exchange hits of the year. And the hackers didn't sit on it. They started moving.
Part of the loot went straight through THORChain, swapped into Bitcoin. No ID check. No compliance desk. No one asking where the coins came from. That's not an oversight. That's the product.
Bitget saw the flow and asked THORChain to block the wallets. Reasonable ask. Turn the hackers away. THORChain declined.
And just like that, the two sides of crypto's oldest argument are staring at each other again. Code versus courts. Neutrality versus damage control.
What Actually Breaks
Here's the brutal part. Once those coins land as Bitcoin, nobody freezes them. Not Bitget. Not a regulator. Not Chainalysis with a wallet list a mile long.
Analytics firms can tag addresses until they're blue in the face. Exchanges can flag deposits. But the coins themselves are gone. Free. That's the entire pitch of a permissionless bridge, and it worked exactly as designed.
So what did THORChain's refusal actually change? Everything, if you're Bitget. The exchange now faces the same math every hacked platform faces. Eat the loss, cover users from your own balance sheet, or chase funds through a blender you don't control.
RUNE holders got a reminder too. Neutrality cuts both ways. It's the reason the protocol exists, and it's the reason exchanges will think twice before routing volume through it.
Was THORChain supposed to torch its core promise to help one exchange clean up a mess? That's the question nobody on Bitget's side wants to answer out loud.
Traders are watching closely. Not because of this one hack, but because of what a precedent would mean. If THORChain starts blocking addresses on request, it isn't THORChain anymore.
What to Watch Next
Watch Bitget's recovery plan. Exchanges that eat a nine-figure hit usually announce a reimbursement schedule within a few weeks. If users get made whole, this becomes a footnote. If they don't, it becomes a lawsuit.
Watch the on-chain trail. Every swap into Bitcoin narrows the window for recovery. Once coins hit a privacy mixer or a no-KYC off-ramp, the trace goes cold. Time is the enemy here, not the hackers.
And watch for pressure campaigns. Expect other exchanges and analytics firms to push protocols like THORChain to build some kind of freeze function. That fight is coming whether THORChain likes it or not.
The takeaway is simple and a little uncomfortable. Cross-chain swaps are the last real exit for stolen coins, and every protocol that refuses to freeze is casting a vote for code over courts. This changes things, but maybe not in the direction Bitget was hoping.
Related Articles
Explore More
Key Terms Explained
The first cryptocurrency, created in 2009 by the pseudonymous Satoshi Nakamoto.
A bundle of transactions that gets permanently added to the blockchain.
A protocol that lets you move tokens between different blockchains.
Following the laws and regulations that apply to financial activities, including crypto.