Binance hacker just moved funds through $RUNE THORChain → now sitting in an ETH address tied to the $387.5M Bitget hack from September.

Why THORChain? Permissionless cross-chain swaps. No KYC. No approval needed. Once funds hit the liquidity pools, there's zero intervention possible.

This is the dark side of decentralization. Hackers love permissionless infra for a reason.

On-chain detective @zachxbt connected the dots. Same playbook, different day.

Stay sharp out there.