Bitget CEO Asks Thorchain to Block Hacker Addresses as Losses Hit $387.5 Million

2 min read
Bitget CEO Asks Thorchain to Block Hacker Addresses as Losses Hit $387.5 Million
PrimeXBT Editorial Team
Reviewed by PrimeXBT

Topics in article

Bitget CEO Gracy Chen has publicly asked Thorchain to block the addresses behind the exchange's hack, which she says has now grown to $387.5 million. Thorchain faced the same request after the Bybit hack and kept running anyway, and its response to Chen signals little has changed.

Bitget CEO Gracy Chen is asking Thorchain to cut off the addresses draining her exchange, arguing that decentralization shouldn't shield stolen funds. She made the request on X on Saturday, two days after Bitcoin.com News first reported the breach. According to Chen: "Decentralization is a design principle, not a shield for facilitating known stolen funds."

The hack's toll climbs past $350 million

Bitget initially put the damage at around $351 million, but the exchange now estimates that approximately $387.5 million were transferred to attacker-controlled addresses. The attacker has been moving the stolen funds across several rails, including Thorchain, Chainflip, Uniswap, 1inch Fusion, Stargate, Across, and Relay.

Several reports say tens of millions in XRP have been deposited into Thorchain vaults, with another tens-of-millions stash already swapped for bitcoin. The bitcoin is then peeled and hopped across many addresses, a pattern that pushed Chen to publicly call on Thorchain to refuse service to the attacker's wallets, since they are publicly listed and actively tracked.

A repeat of the Bybit standoff

Thorchain has been here before. During the Bybit hack, the network moved $1.2 to $1.5 billion in stolen funds, and the FBI asked the industry to block the DPRK-linked addresses involved.

Three of Thorchain's validators voted to halt ETH trading at the time, but four validators reversed that decision half an hour later, and the network kept running. A developer quit over the episode.

Thorchain can halt itself entirely when its own operators choose to. After the May 2026 GG20 exploit drained about $10.7 to $11 million from one of its vaults, operators paused the network for weeks while they patched it.

But that pause was the protocol defending itself, not blocking an outside attacker's funds on request. Thorchain's official account replied to Chen on Saturday, framing itself as decentralized and permissionless like Bitcoin, Ethereum, and BNB Chain, and asking what responsibility those networks would bear in the same situation.

Source: Bitcoin News

Trading involves risk.

Most traded markets

BTC / USD
+0.44% 84,094.2
XAU / USD.24
0% 4,284.96
ETH / USD
+0.17% 2,683.03
SOL / USD
+0.26% 121.14
XRP / USD
-1.78% 1.5214
AVAX / USD
+2.36% 10.682
View all markets

Author

PrimeXBT
Our Editorial Team consists of leading experts with a proven record in the fields of trading, cryptocurrencies, blockchain and finance. We thoroughly research the sources of information in order to provide readers with quality content that serves edu...
Read author’s articles
Alert Triangle Risk Disclaimer
Disclaimer: Some past publications may be outdated. We recommend following our news to stay up to date with the latest information. For any questions, feel free to contact our support team via the chat below.
The content provided here is for informational purposes only. It is not intended as personal investment advice and does not constitute a solicitation or invitation to engage in any financial transactions, investments, or related activities. Past performance is not a reliable indicator of future results.
The financial products offered by the Company are complex and come with a high risk of losing money rapidly due to leverage. These products may not be suitable for all investors. Before engaging, you should consider whether you understand how these leveraged products work and whether you can afford the high risk of losing your money.
The Company does not accept clients from the Restricted Jurisdictions as indicated in our website/ T&C. Some services or products may not be available in your jurisdiction.
The applicable legal entity and its respective products and services depend on the client’s country of residence and the entity with which the client has established a contractual relationship during registration.

Today in markets

Browse Crypto News

Register Now

Trading involves risk

Get started in minutes

Our clients love how fast and simple our sign-up is. It takes just a few minutes to get started!

Get Started Get Started
Get started in minutes

Need Help?

Risk Warning:
Trading in leveraged products carries a high level of risk and may not be suitable for all investors.