#RUNE随THORChain修复漏洞重启交易

THORChain is a very unusual part of this industry. Both OKX Exchange and OKX Wallet took action immediately and stood ready to support efforts to identify, track, and block the movement of hacked funds where possible. Resilience is a critical quality for every crypto company. When incidents happen, the industry needs to respond quickly, share information, and work together to protect users and prevent similar attacks from happening again. Security is not a competition. It’s a shared responsibility.

Our attacker addresses are publicly listed and actively tracked. We are formally asking @THORChain to refuse service to these addresses. Decentralization is a design principle, not a shield for facilitating known stolen funds. The industry is watching.

会通过 THORChain 进行跨链兑换的，90% 以上是黑灰产资金。 对 THORChain 来说，这个选择肯定是不难做的：一旦出手限制，后面的黑灰产资金不会再走他们这，他们就没办法源源不断的收 "过路费" 了。 跟去中心化无关，只关乎利益。 去年 Bybit 被盗资金大部分通过 THORChain 进行转移，THORChain 10 天时间赚了近 $1000 万的手续费。 这两天 Bitget 被盗资金才有一部分通过 THORChain 进行转移，他们手续费收入已经赚了 $100 万了。

Bitget CEO Gracy Chen Formally Asks THORChain to Reject Transactions from Exploiter Addresses On-chain tracking platform MistTrack, an arm of SlowMist, pointed out that following an earlier exploit of Bybit where nearly $1.2 billion in stolen funds was routed through THORChain for cross-chain transfers, proceeds from the recent Bitget security incident are once again flowing into THORChain for asset swaps and cross-chain bridging. MistTrack stated that the hacker addresses had already been publicly flagged and actively tracked across the industry. With the protocol continuing to facilitate large-scale cross-chain swaps despite knowing the assets originated from a publicly known major exploit, MistTrack argued that decentralization should not serve as an excuse for handling known stolen funds, and that the industry needs to seriously discuss what responsibility THORChain should bear in such scenarios. In response, Bitget CEO Gracy Chen stated that the associated attacker addresses have been made public and remain under active surveillance, formally asking THORChain to reject transactions originating from these addresses. She noted that decentralization is a design principle rather than a shield for facilitating the movement of known stolen funds.

I don’t think THORChain’s TSS + validator model represents true decentralization. The selected validators set collectively controls the underlying assets in the TSS vaults. Once the signing threshold is reached, those validators can move the funds. So from a custody perspective, THORChain is not comparable to Bitcoin or Ethereum base-layer consensus — it effectively acts as an intermediary between users and the native chains. TSS distributes control among multiple parties, but distributing an intermediary does not eliminate the intermediary.

False! THORChain effectively proved that it is not truly decentralized. In May, when its own vaults were drained, node operators paused the entire network within minutes and kept it offline for 13 hours. A network that can stop when its own funds are at risk, but refuses to do so when someone else’s funds are at risk, is not “like Bitcoin.” Bitcoin cannot be stopped. THORChain can—it simply chooses when to do so.

GoPlus Challenges THORChain’s Decentralization Claims Over DPRK-Linked Fund Flows GoPlus Security argued that THORChain should not compare itself directly with Bitcoin or Ethereum when defending its inability to block illicit flows. It said THORChain outbounds rely on threshold signatures from a relatively small active validator set, while the protocol already includes pause, per-chain signing halt and governance mechanisms. GoPlus pointed to prior intervention during THORChain’s own exploit and argued that FBI- or OFAC-attributed DPRK-linked funds could be blocked under the protocol’s existing emergency framework.

THORChain回应“处理黑客资金”质疑：去中心化无需许可协议，无法阻止 针对链上追踪平台 MistTrack 关于 THORChain 多次被用于转移 Bybit、Bitget 等交易所被盗资金的批评，THORChain 回应称，对近期相关交易所被攻击事件感到痛心，同时强调自身与比特币、以太坊、BNB Chain一样，是去中心化且无许可的协议。并反问：“当比特币、以太坊和 BNB Chain 处理已知被盗资金时，它们应承担什么责任？”

THORChain could've been success story like $NEAR. Instead, they played the 'decentralization' card while hacked funds flowed through and they earned fees. Yet they halted the network when they themselves got hacked for $10.7M in May I think that's a big reason why $NEAR trades at a $6.3B and $RUNE at $248M.

THORChain says it won't cut off addresses tied to Bitget's $387.5 million hack. "A halt is not a selective freeze of specific funds or an individual swap," the protocol wrote Monday, after Bitget CEO Gracy Chen formally asked it to refuse service. https://t.co/OO34yCsVf8