- A wallet tied to the Bitget hacker swapped roughly $6.3 million in ETH for Bitcoin through THORChain, per CoinDesk’s review of on-chain activity.
- The move followed THORChain’s rejection of Bitget’s request to freeze addresses linked to the exchange’s Sep. 24 breach.
- Bitcoin traded near $83,804, down 0.77% on the day, while Ethereum changed hands around $2,688.76, up 0.07%.
- The episode highlights the tension between decentralized cross-chain infrastructure and centralized exchanges seeking to contain stolen funds.
The fallout from the Bitget breach has taken a notable turn, with a wallet tied to the attacker converting roughly $6.3 million in ETH into Bitcoin through THORChain. The swap came after the decentralized cross-chain protocol declined a request from the exchange to freeze addresses connected to the Sep. 24 incident, according to CoinDesk’s review of the transactions. The sequence matters because it illustrates how quickly stolen assets can move across chains when a bridge or swap protocol refuses to intervene. By routing value from Ethereum into Bitcoin, the attacker shifts the funds into a different liquidity environment and away from the address set that Bitget had flagged. THORChain’s design, which settles swaps through its own network of validators and liquidity pools rather than a centralized intermediary, leaves little room for an exchange to unilaterally halt a transaction once it is broadcast.
Why THORChain’s Refusal Is Significant
THORChain has positioned itself as permissionless infrastructure, meaning it does not screen or block users at the protocol level. That stance is central to its value proposition for traders who want cross-chain exposure without relying on a custodian, but it also means requests from exchanges to blacklist addresses generally fall outside what the protocol is built to do. Bitget’s request was therefore not a routine operational ask; it was a test of whether a decentralized network would bend toward a centralized counterparty’s enforcement needs. The rejection does not necessarily mean the funds are beyond reach. Blockchain analytics firms and exchanges can still trace the flow, and centralized venues that receive the Bitcoin may apply their own compliance checks. The practical question is whether the attacker can convert the Bitcoin into fiat or other assets without passing through a regulated on-ramp that would flag the coins. Historically, hackers have used mixers, chain-hopping, and over-the-counter desks to obscure provenance, though law enforcement has become more adept at following these trails.
Market Backdrop and Broader Implications
The activity unfolded against a soft session for the largest cryptocurrency. Bitcoin was trading near $83,804, down 0.77% on the day, while Ethereum held roughly flat at about $2,688.76, up 0.07%. Neither asset showed a dramatic reaction to the news, which is consistent with how markets have typically absorbed exchange-specific exploits: the damage tends to be contained to the affected platform and its users rather than spilling into broad sentiment. For Bitget, the priority now is recovery and user confidence. Exchanges that suffer breaches often face pressure to reimburse affected customers, tighten custody controls, and demonstrate that they can cooperate effectively with law enforcement and analytics providers. The THORChain episode adds a complicating layer, because it shows that even a well-resourced exchange cannot always rely on decentralized infrastructure to assist in containment.
What to Watch Next
Attention will likely focus on whether the Bitcoin associated with the swap moves again, and whether any centralized exchange or service provider flags it. Analysts will also watch for any change in how THORChain or similar protocols handle future freeze requests, since the precedent set here could shape expectations across the industry. For now, the episode stands as a reminder that in crypto, the speed of settlement and the absence of a central authority cut both ways: they enable open access, but they also make rapid asset movement possible when someone is trying to evade a freeze.
Comments are closed.