analysis

THORChain Co-Founder Cites Public Data After FBI Binance Blocking Appeal

3Importance
closedStatus
3News media
3Pieces
Published
Updated
Since then
2 new reports

Binance reopened withdrawals after its hack, and the FBI asked THORChain node operators to block transactions tied to the attacker’s addresses. THORChain co-founder JP Thorbjornsen said the protocol should not stop activity to meet that request, while the FBI appeal also named THORNode operators and highlighted that THORChain controls can halt broader trading and affect other users.

Key claims & sources

✓
The FBI explicitly named THORNode operators in its appeal.
✓
THORChain’s controls allow broad trading halts that can also interrupt other users.
✓
Binance reopened withdrawals after the exchange’s hack.
✓
THORChain co-founder JP Thorbjornsen said the protocol should not halt activity to comply with FBI demands.
✓
The FBI asked THORChain node operators to block transactions tied to the Binance attacker’s addresses.

What it means

THORChain runs cross-chain swaps through a network of validator nodes, or THORNodes, with no central custodian and no KYC gate, which is precisely why it has repeatedly become a preferred route for laundering stolen funds. Law enforcement reaching into protocol infrastructure is not new: Tornado Cash's sanctioning in 2022 set the precedent for treating code and node operators as targets, not just the hackers using them.

THORNode operators now face a direct choice with legal weight: block the Binance attacker's addresses and accept a precedent of selective censorship, or refuse and risk being treated as facilitators. Traders relying on THORChain for routine cross-chain swaps could see unrelated transactions caught in any broad halt, since the protocol's pause mechanism is not surgical. RUNE holders already absorbed sell pressure as the dispute became public.

A protocol that can halt trading at the flip of a validator switch is not as decentralized as its design implies, and that is the uncomfortable fact the FBI's request exposes. Thorbjornsen's refusal defends permissionless operation, but the same control that could block a hacker could just as easily block a government critic or a sanctioned jurisdiction. Whether THORChain's governance deserves credit for resisting censorship or blame for being capable of it either way depends on who holds the switch.

The outcome hinges on whether THORNode operators formally act on the FBI's named request or let it lapse unanswered, since no vote or binding governance process compels compliance. If operators block the addresses, expect scrutiny of how concentrated that decision-making power really is; if they refuse, expect the Justice Department to test enforcement against individual node runners rather than the protocol as a whole.

Market reaction i

THORChainRUNE it is the asset of the company or protocol in the event
first headline
-1.7% 2 h before
-3.5% 4 h after
$0.5724price at publication
12data points

Coverage timeline

Every piece in order, with the time its news medium declares — if it is not believable we use ours and say so — and what it added to what was already known at that point. Arriving first is not the same as adding something.

first
Nov 1 20:38
+1 d 9 h
Nov 3 06:00

Where this sits in the THORChain series

WhenWhat happenedFigure
40 days ago RUNE at $0.8384 high today it sits -27.3% from there
4 days ago RUNE at $0.4994 low today it sits +22.0% from there

From what we have stored, starting 42 days ago.