A major crypto theft has once again highlighted the ongoing battle between hackers, exchanges, and decentralized protocols. Recently, the Bitget hacker successfully converted 2,390 ETH—worth approximately $6.3 million—into 75.2 BTC using the cross-chain swapping protocol THORChain. This move came shortly after Bitget’s CEO, Gracy Chen, publicly requested that the funds be frozen.
The incident raises serious questions about the effectiveness of freeze requests in decentralized finance (DeFi) and underscores how easily stolen crypto assets can move across blockchain networks.
What Happened: From ETH Theft to BTC Laundering
The story begins with a significant security breach at Bitget, a popular cryptocurrency exchange. According to reports, the attacker made off with 2,390 ETH, a substantial sum that immediately triggered alarm bells within the exchange’s leadership team.
Gracy Chen, CEO of Bitget, made a public appeal to freeze the stolen funds. In traditional finance, this is similar to asking a bank to place a hold on a stolen credit card. However, the crypto world operates very differently. Once assets are on a blockchain, they can be moved freely unless the protocol itself has built-in controls to stop them.
Rather than cooperating with freeze requests, the hacker used THORChain—a decentralized liquidity network—to swap the stolen Ethereum for Bitcoin. Think of THORChain as a currency exchange booth that operates without asking questions. It allows users to swap one crypto asset for another directly between chains, without going through a centralized exchange that might enforce compliance rules.
Why THORChain Is a Favorite Tool for Crypto Laundering
THORChain has become a go-to platform for moving illicit funds in the crypto space. Here’s why:
1. Decentralization Means No Central Authority
Unlike platforms such as Kraken or other regulated exchanges, THORChain has no central operator that can freeze accounts or block transactions. Its validators operate independently across the globe.
2. Cross-Chain Swapping Made Easy
The protocol specializes in letting users trade assets between different blockchains—Ethereum to Bitcoin, for example—without intermediaries. For criminals, this is the equivalent of exchanging stolen gold for cash at a border crossing.
3. Liquidity Pools Provide Deep Reserves
THORChain’s liquidity pools are deep enough to handle large transactions like the $6.3 million swap, making it practical for moving significant sums without slippage.
While THORChain itself is not inherently malicious—it serves legitimate users who value privacy and decentralization—its design makes it attractive for illicit activity.
The Bigger Problem: Freeze Requests Don’t Work in DeFi
Gracy Chen’s plea to freeze the funds highlights a fundamental tension in the crypto industry. Centralized exchanges can—and do—comply with law enforcement requests. They maintain user identities, monitor transactions, and can lock accounts when suspicious activity is detected.
But DeFi protocols like THORChain operate on smart contracts. These are self-executing programs that run exactly as coded, with no human intervention. There’s no customer support to call, no compliance officer to appeal to, and no way to reverse transactions once they’re confirmed on the blockchain.
This creates a frustrating reality for victims of crypto theft: even if everyone knows where the stolen funds went, stopping them is nearly impossible without the cooperation of the entire ecosystem.
How to Protect Your Crypto Assets
Incidents like this serve as a powerful reminder of why self-custody (controlling your own crypto rather than leaving it on an exchange) and proper security practices are essential.
Use a Hardware Wallet
For long-term storage of significant amounts of crypto, a hardware wallet is the gold standard. Devices like Ledger store your private keys offline, making them virtually immune to online hacking attempts. Think of it as a personal vault that no exchange or hacker can access remotely.
Choose Reputable Exchanges
When you do need to trade, stick to well-known, regulated platforms with strong security track records. Exchanges like Bitvavo and Kraken invest heavily in security infrastructure and comply with regulatory requirements.
Enable Two-Factor Authentication (2FA)
Always activate 2FA on every exchange account. This adds an extra layer of protection beyond your password.
Stay Informed
Follow news about security incidents and learn to recognize phishing attempts, fake websites, and social engineering tactics.
What This Means for the Future of Crypto Security
The Bitget hack and subsequent laundering via THORChain will likely intensify the debate around DeFi regulation. Critics argue that protocols enabling anonymous cross-chain swaps should implement transaction monitoring or blacklisting features. Supporters counter that doing so would undermine the core principles of decentralization and financial freedom.
What’s clear is that the gap between centralized and decentralized finance creates vulnerabilities that criminals exploit. Until the industry develops better tools for tracing and recovering stolen assets across DeFi protocols, hackers will continue to find ways to move funds beyond the reach of law enforcement.
Final Thoughts: Vigilance Is Your Best Defense
The conversion of 2,390 stolen ETH into Bitcoin via THORChain is more than just another crypto heist—it’s a case study in the challenges facing the industry. While decentralized protocols offer incredible benefits, they also create opportunities for bad actors.
As an investor or user, the best protection is taking security into your own hands. Use hardware wallets for storage, choose reputable exchanges for trading, and stay educated about emerging threats. The crypto world offers tremendous opportunities, but it also demands a higher level of personal responsibility than traditional finance.
Stay safe, stay informed, and never underestimate the importance of securing your own assets.
