Bitget’s hack exposes a double standard on stolen funds

cryptonews09-29 21:36

THORChain is being asked to block stolen funds. Why isn’t the same demand being made of the blockchains carrying them? Summary Bitget has called on THORChain to block addresses linked to its $...

Source Link

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

Comments

We need your insight to fill this gap

Leave a comment

{"i18n":{"language":"en_US"},"isChannel":false,"data":{"share":"https://ttm.financial/m/news/2671721720?lang=en_US&edition=fundamental","thumbnail":"","is_english":true,"pubTime":"2026-09-29 21:36","share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","id":"2671721720","market":"fut","top_or_hot":-1,"title":"Bitget’s hack exposes a double standard on stolen funds","media":"cryptonews","content":"<div>\n<p>THORChain is being asked to block stolen funds. Why isn’t the same demand being made of the blockchains carrying them?\n\n\nSummary\n\n\n\nBitget has called on THORChain to block addresses linked to its $...</p>\n\n<a href=\"https://crypto.news/bitgets-hack-exposes-a-double-standard-on-stolen-funds/\">Source Link</a>\n\n</div>\n","source":"crypto_news_highlight","html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Bitget’s hack exposes a double standard on stolen funds</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nBitget’s hack exposes a double standard on stolen funds\n</h2>\n\n<h4 class=\"meta\">\n\n\n2026-09-29 21:36 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://crypto.news/bitgets-hack-exposes-a-double-standard-on-stolen-funds/><strong>cryptonews</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>THORChain is being asked to block stolen funds. Why isn’t the same demand being made of the blockchains carrying them?\n\n\nSummary\n\n\n\nBitget has called on THORChain to block addresses linked to its $...</p>\n\n<a href=\"https://crypto.news/bitgets-hack-exposes-a-double-standard-on-stolen-funds/\">Source Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","isBrief":false,"type":0,"news_type":1,"symbol":"MAXI","symbol_name":"比特币期货ETF-Simplify","start_time":0,"source_url":"https://crypto.news/bitgets-hack-exposes-a-double-standard-on-stolen-funds/","article_id":"2671721720","we_media_id":null,"thumbnails":[],"rights":{"source":"crypto_news_highlight","url":"https://crypto.news/bitgets-hack-exposes-a-double-standard-on-stolen-funds/","rn_cache_url":null,"directOrigin":true},"url":"https://stock-news.laohu8.com/highlight/detail?id=2671721720","pubTimestamp":1790688968,"columns":[],"sourceInfo":{"source_id":"crypto_news_highlight","name":"Crypto News"},"weMediaInfo":null,"summary":"THORChain is being asked to block stolen funds. Why isn’t the same demand being made of the blockchains carrying them?Bitget has called on THORChain to block addresses linked to its $387.5 million hack, raising questions over whether permissionless networks should intervene when stolen funds pass through them.The stolen assets moved across several blockchains and services, including Ethereum, BNB Chain and THORChain, before portions were converted into Bitcoin.THORChain can halt trading in emergencies, but broader intervention could disrupt legitimate users and require independent node operators to enforce new transaction restrictions.Investigators have traced attacker controlled addresses across eight networks, showing that public transaction records can remain useful even as stolen funds move between chains.THORChain is not identical to a base-layer blockchain. More specifically, it operates liquidity pools and vaults secured through threshold signatures, with groups of independent n","collect":0,"end_time":0,"defaultTopTitle":"crypto.news","property":[],"viewcount":null,"language":"en","relate_stocks":{"MAXI":"比特币期货ETF-Simplify","BITX":"2倍比特币期货ETF-Volatility Shares","CRPT":"First Trust SkyBridge Crypto Industry and Digital Economy ETF","BTCO":"比特币ETF-Invesco Galaxy","BAGY":"Amplify Bitcoin Max Income Covered Call ETF","BCCC":"Global X Bitcoin Covered Call ETF","STCE":"Schwab Crypto Thematic ETF","BITY":"Amplify Bitcoin 2% Monthly Option Income ETF","CBOO":"Calamos Bitcoin Structured Alt Protection ETF - October","ARKB":"比特币ETF-21Shares","BTRN":"比特币期货ETF-Global X","CBTY":"Calamos Bitcoin 80 Series Structured Alt Protection ETF - July","BITB":"比特币ETF-Bitwise","CBXA":"Calamos Bitcoin 90 Series Structured Alt Protection ETF – April","FBTC":"比特币ETF-Fidelity","BETE":"等权重比特币&以太币期货ETF-ProShares","CBOY":"Calamos Bitcoin Structured Alt Protection ETF - July","BFJL":"FT Vest Bitcoin Strategy Floor15 ETF - July","GBTC":"比特币ETF-Grayscale","IBIT":"比特币ETF-iShares","XBTY":"GraniteShares YieldBOOST Bitcoin ETF","BETH":"比特币&以太币期货ETF-ProShares","BITI":"1倍做空比特币期货ETF-Proshares","SBIT":"2倍做空比特币期货ETF-Proshares","BTC":"Grayscale Bitcoin Mini Trust","BITO":"比特币期货ETF-ProShares","ETQ":"T-Rex 2X Inverse Ether Daily Target ETF","CBXO":"Calamos Bitcoin 90 Series Structured Alt Protection ETF - October","BRRR":"比特币ETF-CoinShares","BPI":"Grayscale Bitcoin Premium Income ETF","BTCC":"Grayscale Bitcoin HIGH Income ETF","ETHI":"Defiance Leveraged Long Income Ethereum ETF","CBOA":"Calamos Bitcoin Structured Alt Protection ETF - April","HODL":"比特币ETF-VanEck","QBF":"Innovator Uncapped Bitcoin 20 Floor ETF - Quarterly","BTCI":"NEOS Bitcoin High Income ETF","ESK":"REX-Osprey ETH + Staking ETF","BTF":"比特币&以太币期货ETF-CoinShares","YBTC":"比特币看涨期权ETF-Roundhill","CBOJ":"Calamos Bitcoin Structured Alt Protection ETF - January","BFAP":"FT Vest Bitcoin Strategy Floor15 ETF - April","BITU":"2倍做多比特币期货ETF-Proshares","SETH":"1倍做空以太币期货ETF-Proshares","CBTA":"Calamos Bitcoin 80 Series Structured Alt Protection ETF – April","BKCH":"AdvisorShares Sabretooth ETF","ETCO":"Grayscale Ethereum HIGH Income ETF","BTCL":"T-REX 2X LONG BITCOIN DAILY TARGET ETF","CBTJ":"Calamos Bitcoin 80 Series Structured Alt Protection ETF - January"},"translate_title":"Bitget 的黑客攻击暴露了对被盗资金的双重标准","themeId":null,"isJumpTheme":false,"ttsUrl":null,"symbols_score_info":{"BFAP":0.6,"YBTC":0.6,"ESK":0.6,"MAXI":0.6,"ETQ":0.6,"BAGY":0.6,"BITX":0.6,"BCCC":0.6,"CRPT":0.69,"CBOY":0.6,"BFJL":0.6,"CBXA":0.6,"BITB":0.6,"BTC":0.6,"CBXO":0.6,"BTF":0.62,"IBIT":0.62,"SETH":0.6,"BETE":0.62,"BPI":0.6,"BTCO":0.6,"BITY":0.6,"HODL":0.6,"BTCL":0.6,"STCE":0.69,"ETHI":0.6,"BRRR":0.6,"BITU":0.6,"BETH":0.62,"CBTJ":0.6,"CBTY":0.6,"CBOA":0.6,"BITI":0.6,"CBTA":0.6,"ARKB":0.6,"CBOO":0.6,"BITO":0.6,"BKCH":0.69,"ETCO":0.6,"GBTC":0.6,"BTRN":0.6,"CBOJ":0.6,"QBF":0.6,"BTCC":0.6,"FBTC":0.6,"SBIT":0.6,"XBTY":0.6,"BTCI":0.6},"content_text":"THORChain is being asked to block stolen funds. Why isn’t the same demand being made of the blockchains carrying them?\n\n\nSummary\n\n\n\nBitget has called on THORChain to block addresses linked to its $387.5 million hack, raising questions over whether permissionless networks should intervene when stolen funds pass through them.\nThe stolen assets moved across several blockchains and services, including Ethereum, BNB Chain and THORChain, before portions were converted into Bitcoin.\nTHORChain can halt trading in emergencies, but broader intervention could disrupt legitimate users and require independent node operators to enforce new transaction restrictions.\nInvestigators have traced attacker controlled addresses across eight networks, showing that public transaction records can remain useful even as stolen funds move between chains.\n\n\n\nBitget has every reason to pursue the people behind its recent hack and recover the money. The exchange now puts the loss at approximately $387.5 million, and its users deserve restitution. The pressure being applied by Bitget and some inside the industry, however, raises questions about how responsibility gets assigned once stolen money starts moving.\nLast week, Bitget CEO Gracy Chen asked THORChain to refuse service to identified attacker addresses. THORChain responded by pointing to Bitcoin, Ethereum and BNB Chain: what responsibility should those networks bear when the same stolen assets pass through them?\nCrypto has spent years defending infrastructure that operates without discretionary gatekeepers. After a major theft, some panic and that infrastructure suddenly faces demands to acquire those powers. The industry needs a consistent explanation for where it draws the line.\nThe same money crossed other networks\nAccording to Bitget’s account, the attacker exploited a vulnerability in a third-party security product, obtained internal credentials and submitted fraudulent withdrawal commands. The exchange says its private keys and cold wallets were unaffected.\nThe assets subsequently travelled through multiple networks and services.It was traced on BNB Chain and Ethereum through THORChain into Bitcoin. Those underlying blockchains continued processing transactions as the funds moved between attacker-controlled wallets.\nThe question posed to those within crypto is if Bitcoin miners and Ethereum validators reject those proceeds too? Treating transaction processing as endorsement of theft would extend responsibility across much of the infrastructure the attacker touched. Calling for selective intervention at the swap layer demands a stronger justification than the fact that the transaction was visible there.\nTHORChain is not identical to a base-layer blockchain. More specifically, it operates liquidity pools and vaults secured through threshold signatures, with groups of independent node operators authorizing outbound transactions. It does not give a single executive the power to suspend a customer.\nA network halt is not an account freeze\nTHORChain’s governance process puts protocol changes through development, review and node adoption. A durable, protocol-wide wallet blacklist would require enforcement rules and sufficient participation from independent operators. Bitget is asking for a change to the network’s transaction rules, with consequences beyond this attacker.\nEmergency controls also exist. THORChain describes chain-specific trading halts, signing halts and network-wide trading halts. A global trading halt stops swaps across every connected chain, interrupting legitimate users and the swap fees their activity generates. Narrower halts still affect everyone using the relevant chain.\nUsing those emergency powers whenever externally stolen funds arrive would give them a broader purpose. But realistically the case for doing so needs to account for the ordinary users caught in the shutdown, alongside the conditions for restarting.\nBlocking one route leaves plenty of others\nRoughly a dozen services were identified after the theft, including Uniswap, MetaMask Bridge and Swaps, LI.FI, Across, Stargate, deBridge, Relay, Mayan, Celer, PancakeSwap, and Circle’s Cross-Chain Transfer Protocol. These were routes used after the compromise, not the source of it.\nBlocking one venue could delay an attacker or increase costs. It would not eliminate alternative routes, establish control over funds elsewhere or guarantee recovery. Permanent screening would also require decisions about who maintains the blacklist, what evidence qualifies and how mistakes are corrected. Those powers carry huge consequences for a permissionless network.\nMeanwhile, public records are helping investigators. 28 attacker-controlled addresses were mapped across eight networks within hours. THORChain’s public transaction data gives investigators a trail to follow without requesting access to a private exchange ledger.\nA portion of the funds were traced through TRON, Ethereum and THORChain into Bitcoin, then linked roughly four BTC to a Wasabi CoinJoin transaction. In that documented sequence, investigators followed the cross-chain swaps; the later CoinJoin complicated the connection between inputs and outputs. Passing through THORChain had not erased the trail.\nFor an industry with decentralization at its core, a practical division of responsibilities would be between independently operated infrastructure, public transaction records and intervention where assets can actually be controlled. Cooperation should be judged by better tracing, faster identification and money recovered.\nBitget deserves support in pursuing the stolen funds. Requiring an open network to become a discretionary gatekeeper is not a sustainable or practical answer. The question here is how many innocent users would pay for it.\n\n\n\n\n\n                Read more:\n            \n\n                ECB wants to test AI-powered digital euro payments","kind":"highlight","is_publish_news":true,"is_publish_highlight":false,"is_publish_live":false,"is_publish_wemedia":false,"editions":null,"column":"","sentiment":"0","news_tag":"","news_rank":0,"isVideo":false,"video":null,"symbols":[],"gpt_button":0,"need_auth":false,"need_login_tip":false,"code":"91000000","status":"200"},"commentList":[],"isCommentEnd":true,"newsSizeData":{"likeSize":0,"commentSize":0,"repostSize":0,"favoriteSize":0,"likeStatus":false,"favoriteStatus":false},"APP":{"userAgent":"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)","isDev":false,"isTTM":true,"isLaohu8Offline":false,"tenantId":"TBGLOBAL","deviceId":"web-server-community-laohu8-v3","version":"4.50.1","shortVersion":"4.50.1","platform":"web","vendor":"web","appName":"ttm","isIOS":false,"isAndroid":false,"isTiger":false,"isTHS":false,"isWeiXin":false,"isWeiXinMini":false,"isWeiBo":false,"isQQ":false,"isBaiduSwan":false,"isBaiduBox":false,"isDingTalk":false,"isToutiao":false,"isOnePlus":false,"isHuaWei":false,"isXiaomi":false,"isXiaomiWebView":false,"isOppo":false,"isVivo":false,"isSamsung":false,"isMobile":false},"href":"/m/news/2671721720","isCrawlerRequest":true}