hack or exploit

THORChain’s RUNE jumps 13% after Binance’s record $6.3B hack

1Importance
closedStatus
2News media
2Pieces
Published
Updated
Since then
1 new report
In
DeFi
Also mentions
BGB

RUNE rose after the Binance hack became public, while coverage linked the token’s move to hackers using THORChain to move stolen funds. Earlier episodes involving Bybit and Bitget had already put THORChain under scrutiny, and the new reporting framed the latest rally against a falling broader crypto market.

Key claims & sources

✓
RUNE rose 13% after news of Binance’s $6.3 billion hack became public.
✓
North Korean hackers had previously used THORChain to move funds stolen from Bybit and Bitget.
✓
RUNE was up 15% after hackers used THORChain to launder stolen funds.
✓
The rally in RUNE came while the broader crypto market was falling after the Binance hack.

What it means

THORChain is a cross-chain protocol that lets assets move between blockchains without a central intermediary, and that design has already drawn attention after earlier thefts involving Bybit and Bitget. Binance’s $6.3 billion hack put that same routing function back in the spotlight, with RUNE moving sharply as traders reassessed the protocol’s role in stolen-funds flows. The story sits at the intersection of decentralized infrastructure and enforcement pressure, especially when the same rails can be used for ordinary transfers and for laundering tied to major exchange breaches.

For users and builders around THORChain, the immediate issue is reputational and operational: activity around the protocol can become linked with illicit transfers, even when the network itself is permissionless. That can sharpen calls for intervention, monitoring, or changes in how liquidity and routing are handled, especially after a hack of Binance’s size. The market reaction also shows that token moves can diverge from the rest of crypto when a protocol is thrust into a security incident.

The wider trade-off is between open, censorship-resistant transfer rails and the ability to stop stolen crypto from moving quickly across chains. THORChain’s structure makes it useful for legitimate cross-chain activity, but the same openness leaves it exposed when hackers reach for the fastest route out. This is not just about one token; it is about whether decentralized networks can keep serving neutral infrastructure users while remaining difficult to abuse at scale.

What remains unresolved is how much of the latest RUNE move was tied to the Binance hack itself and how much reflected traders reacting to THORChain’s repeated appearance in theft-related flows. The open question is whether any intervention will follow, and if so, whether it would change how the protocol handles future cross-chain transfers. The answer would become clearer if the involved parties or protocol operators set out what, if anything, changes after this incident.

Market reaction i

THORChainRUNE it is the asset of the company or protocol in the event
first headline
+0.7% 2 h before
-2.9% 4 h after
$0.6708price at publication
12data points

Coverage timeline

Every piece in order, with the time its news medium declares — if it is not believable we use ours and say so — and what it added to what was already known at that point. Arriving first is not the same as adding something.

first
Oct 30 09:52
Cointelegraph scoop
Breaks the event: $6.3B
+11 h 8 m
Oct 30 21:00
AMBCrypto context
Its angle: examining, general, launder

Thefts of a similar size

WhenWhat happenedFigure
5.9 years ago LuBian · Weak key generation incident $3.5B
5.5 years ago Thodex · Scam incident $2.5B
5.4 years ago Africrypt · Scam incident $2.3B
6.4 years ago Wirecard · Scam incident $2.1B
5.2 years ago BitConnect · Scam incident $2B

4280 incidents stored · 0 were as large as this one or larger ($6.3B)