Bitget Got Hacked. Why Is THORChain on Trial?

HACK OR EXPLOITBitget Got Hacked. WhyIs THORChain on Trial?52IMPORTANCECLOSED8NEWS MEDIA10PIECESSep 29, 2026 13:11blockboard.net

Bitget restored its protection fund to more than $300 million after the Sept. 24 security incident and said remaining cryptocurrency withdrawals were set to resume. Onchain tracing and blockchain-analytics coverage linked the stolen XRP and related movements to THORChain and to North Korea-linked activity, while the debate around THORChain centered on whether permissionless systems can or should block stolen funds.

What this rests on

Claim by claim, with its source
✓
The Bitget hack put THORChain’s permissionless design under scrutiny as the industry debated censorship and control over stolen funds.
✓
The case also revived the question of why the same demand is not being made of the blockchains that carried the stolen funds.
✓
Bitget said it replenished its Protection Fund to more than $300 million after the Sept. 24 security incident.
✓
A crypto lawyer said THORChain would not, or could not, block addresses linked to the Bitget hack and said possible prosecution of its developers for money laundering was complicated.
✓
Bitget reported an estimated $388 million impact from the Sept. 24 incident and said phased withdrawals were scheduled to resume while customer claims stayed under review.
✓
Bitget said it had frozen about $1.1 million and expected only limited recovery from the $387.5 million hack, while withdrawals for the remaining cryptocurrencies were set to resume on Friday.
✓
BlockSec traced the $387.5 million theft into Bitcoin, THORChain and CoinJoin, and said only about $840,000 had been publicly frozen.
✓
Chainalysis linked most of the stolen XRP from the $387 million Bitget hack to North Korea and said the theft pushed North Korea-linked crypto thefts above $1 billion in 2026.

What it means

Who it affects, what changes and what is still unconfirmed

Each sentence links inside to the piece that supports it.

Bitget customers and traders are the first group to notice this change, because the exchange said withdrawals for remaining cryptocurrencies were set to restart while customer claims were still under review. Regulators and security teams in the sector also see a larger case for attention, since the stolen XRP was linked to North Korea and the theft moved through THORChain and CoinJoin.

In practice, the case changes what can be expected from THORChain and similar systems: one lawyer said THORChain would not, or could not, block the linked addresses, so the network kept operating as a permissionless system. What also stayed in place was the onchain routing of the stolen funds, which BlockSec traced across Bitcoin, THORChain and CoinJoin.

Market reaction

BG Bitget Token it is the asset of the company or protocol in the event from 2 h before to 4 h after the line marks the first headline
published
+0.00 % before publication
-0.50 % after
$2price at publication
12series points

How the story was built

Every piece in order, with the time its news medium declares — if it is not believable we use ours and say so — and what it added to what was already known at that point. Arriving first is not the same as adding something.

first
Sep 29 12:06
BSC News scoop
Breaks the event
+1 h 30 m
Sep 29 13:36
crypto.news context
Its angle: blockchains, carrying, standard
+22 h 54 m
Sep 30 11:00
+1 d 1 h
Sep 30 13:30
Cointelegraph adds
Sharpens the figure: $387.5M, with quotes
+1 d 13 h
Oct 1 01:50
BitPinas echo
No new facts: emergency, breach, five
+2 d 20 h
Oct 2 08:46
crypto.news adds
Sharpens the figure: $387M
+3 d 1 h
Oct 2 13:30
Cointelegraph adds
Sharpens the figure: $387.7M; brings into the story: NEAR, with quotes
+3 d 4 h
Oct 2 16:10
The Defiant adds
Adds $1B, with quotes
+3 d 4 h
Oct 2 16:24
+4 d
Oct 3 13:00
BeInCrypto adds
Adds $2B, with quotes

Thefts of a similar size

WhenWhat happenedFigure
3.9 years ago FTX · Phishing incident $450M
5.8 years ago OneCoin · Scam incident $440M
23 days ago Bitget incident $351.6M
4.7 years ago Portal · Signature Verification Flaw incident $326M
41 days ago Liquid Network incident $320M

4197 incidents stored · 20 were as large as this one or larger ($387M)

What could happen next

What the prediction markets currently price as likely. This is context, not a forecast of ours: there is money on it, and that is all we show.

2 % +1 pts
Kalshi · $4,415,187 of open interest · resolves on Jan 1, 2027
1 % no series
Kalshi · $1,022,099 of open interest · resolves on Oct 1, 2026
3 % +0 pts
Kalshi · $754,047 of open interest · resolves on Jan 1, 2027
11 % +0 pts
Kalshi · $601,478 of open interest · resolves on Jan 1, 2027