THORChain Rejects Bitget Exploit Address Blocking
THORChain has rejected Bitget’s request to block addresses linked to its September 24 wallet exploit, defending its permissionless design. Bitget said approximately $387.5 million was transferred to attacker-controlled wallets, revising its earlier estimate of $351.6 million after identifying additional Zcash and TRON transactions.
Bitget CEO Gracy Chen urged THORChain to stop processing the flagged funds. THORChain responded that it is decentralized and permissionless like Bitcoin, Ethereum and BNB Chain, asking whether those networks should also be held responsible when stolen assets move through them.
OKX CEO Star Xu challenged the comparison. He argued that THORChain’s validator-controlled Threshold Signature Scheme vaults act as a distributed intermediary because validators can move assets after reaching the required signing threshold. Xu also cited THORChain’s previous ability to halt activity during a May exploit.
THORChain’s controls include emergency network pauses and Mimir governance votes that can stop signing or trading. However, its documentation does not describe a mechanism for selectively blacklisting a single external wallet while maintaining other swaps. Bitget said some assets have been frozen through cooperation with exchanges, blockchain projects and security firms, and is offering a 5% recovery bounty.
The dispute could increase scrutiny of THORChain’s security model, validator powers and role in cross-chain liquidity.
Neutral
The immediate market impact is likely neutral because the dispute concerns governance, compliance and fund recovery rather than a new loss affecting the entire crypto market. It could nevertheless create short-term selling pressure on RUNE if traders interpret THORChain’s refusal as a security or reputational risk. Lower usage of its cross-chain liquidity services could also weaken network activity and token sentiment.
The main risk is confidence in THORChain’s architecture. Critics argue that validator-controlled vaults and emergency pause powers make the system more intermediary-like than Bitcoin or Ethereum. Similar debates after bridge exploits and centralized exchange hacks have often caused sharp, project-specific declines, particularly when users fear frozen funds or unclear recovery procedures. The reported $387.5 million Bitget loss may therefore increase volatility in related tokens and cross-chain protocols.
Over the longer term, the incident could have mixed effects. Stronger address-screening, clearer emergency procedures and improved transparency could support institutional confidence. However, selective blacklisting could undermine THORChain’s permissionless positioning and create regulatory or governance concerns. Traders should monitor RUNE volume, liquidity, exchange announcements, recovery developments and any changes to THORChain’s vault or pause policies. Without evidence of broader contagion, the event is best classified as neutral for the overall crypto market.