[Bitget 387.5 Million US Dollars Stolen Funds Flow to THORChain; Intermediaries Publicly Reconcile Ledgers in Discord]
On-chain sleuth ZachXBT’s latest tracking shows that about $387.5 million stolen from Bitget is being laundered through the THORChain protocol, and relevant parties directly perform ticket reconciliations in the public Discord support channels of SwapKit and NativeSwap. This discovery connects multiple prior exchange-targeting attacks to a specific money-laundering group, highlighting THORChain’s crucial role as a cross-chain bridge in laundering illicit funds.
On the facts, on-chain data indicates that roughly 102 million XRP from the Bitget stolen-funds cluster entered THORChain and was ultimately converted into native BTC. ZachXBT identifies a group of intermediaries known as “Chinese illicit actors” as assisting in handling the funds. Aliases lolo/Marin acknowledge their identity, and the group previously also handled the $292 million stolen funds from Kelp DAO. In THORChain’s support section, victims publicly complain about delays or missing funds—e.g., one user transferred 277,700 XRP but only received 431 XRP; the customer service reply was laced with sarcasm.
Across the affected ecosystem, the incident directly impacts perceptions of THORChain’s reputation and security, because the protocol previously stated that no specific permission is required to process transactions, while actual operations showed abnormal fund destinations. For Bitget, this is not only a massive loss of assets, but also exposes its security weaknesses and the detailed pathway of illicit funds flowing out. The market will need to watch whether THORChain will implement restrictions on known attack addresses, and whether Bitget will compensate impacted users.
The next point to watch is whether THORChain will update its address blacklist policy based on the on-chain sleuth’s allegations, and whether Bitget’s official channels will disclose more information about the recovery of stolen funds or user compensation. If the incident draws regulatory attention, it could affect expectations for compliance among cross-chain bridge protocols.
$XRP $BTC
On-chain sleuth ZachXBT’s latest tracking shows that about $387.5 million stolen from Bitget is being laundered through the THORChain protocol, and relevant parties directly perform ticket reconciliations in the public Discord support channels of SwapKit and NativeSwap. This discovery connects multiple prior exchange-targeting attacks to a specific money-laundering group, highlighting THORChain’s crucial role as a cross-chain bridge in laundering illicit funds.
On the facts, on-chain data indicates that roughly 102 million XRP from the Bitget stolen-funds cluster entered THORChain and was ultimately converted into native BTC. ZachXBT identifies a group of intermediaries known as “Chinese illicit actors” as assisting in handling the funds. Aliases lolo/Marin acknowledge their identity, and the group previously also handled the $292 million stolen funds from Kelp DAO. In THORChain’s support section, victims publicly complain about delays or missing funds—e.g., one user transferred 277,700 XRP but only received 431 XRP; the customer service reply was laced with sarcasm.
Across the affected ecosystem, the incident directly impacts perceptions of THORChain’s reputation and security, because the protocol previously stated that no specific permission is required to process transactions, while actual operations showed abnormal fund destinations. For Bitget, this is not only a massive loss of assets, but also exposes its security weaknesses and the detailed pathway of illicit funds flowing out. The market will need to watch whether THORChain will implement restrictions on known attack addresses, and whether Bitget will compensate impacted users.
The next point to watch is whether THORChain will update its address blacklist policy based on the on-chain sleuth’s allegations, and whether Bitget’s official channels will disclose more information about the recovery of stolen funds or user compensation. If the incident draws regulatory attention, it could affect expectations for compliance among cross-chain bridge protocols.
$XRP $BTC