THORChain halted swaps across multiple blockchains on Saturday after an Ethereum block reorganization exposed a refund bug, which may have inadvertently slowed the movement of funds stolen from Binance, according to Chainalysis. According to THORChain, the incident began at 11:34 UTC on Saturday, when a one-block reorganization on Ethereum removed a 10 ETH deposit that THORChain had already credited. When the swap failed to meet its price limit, THORChain issued a refund against funds the vault had never received.

The Binance attackers moved most of the stolen SOL and continued laundering funds through THORChain after the protocol resumed swaps.

ThorChain under fire because it won’t blacklist stolen Bitget funds Stop me if you’ve heard this before: A centralized exchange with lax security gets hacked by the North Koreans for $387.5 million, and then somehow shifts the blame game onto a decentralized exchange for not blacklisting the addresses. The drama began on September 25 when the Asian focused exchange Bitget revealed $351.6 million in “unauthorized transfers” but it later upgraded the tally to $387.5 million.

Trading resumed on Bitcoin and Ethereum following an Oct. 31 halt, though Binance Smart Chain, Cosmos and Solana remain restricted.

Hackerov, ktorí koncom októbra vykradli kryptoburzu Binance, americká FBI spája so Severnou Kóreou. Denník The Wall Street Journal opísal, cez aké služby sa časť ukradnutých peňazí presúva a kto na tom zarába. Prečo niektoré z nich prevody nezastavili ani po výzve FBI?

Curate Feeds | Make Collections | Customize Email Briefs

Wall Street Journal: THORChain, which handled ~$1B of stolen Bybit funds in 2025 for $12M+ in fees, began moving the Binance loot despite FBI pleas, saying it can't stop transfers  —  Some crypto developers say they can't stop North Korean hackers from laundering stolen funds through their platforms, frustrating law enforcement

Move assets between chains with Circle CCTP, LayerZero, NEAR Intents, Axelar and THORChain. Choose the network you are bridging from to see its routes.

Wall Street Journal: **THORChain, which handled ~$1B of stolen Bybit funds in 2025 for $12M+ in fees, began moving the Binance loot despite FBI pleas, saying it can't stop transfers** — Some crypto developers say they can't stop North Korean hackers from laundering stolen funds through their platforms, frustrating law enforcement

The conversion of stolen XRP to Bitcoin may heighten regulatory scrutiny and impact market sentiment, affecting XRP's short-term valuation. The post Hackers swap $50M stolen XRP for 1,650 BTC via THORChain: Elliptic appeared first on Crypto Briefing.

Hackers behind the Binance theft have swapped about 42 million XRP, roughly $50 million, mostly into bitcoin through THORChain, Elliptic said. Converted bitcoin from the theft rose to about 1,650 BTC, worth some $124 million. About 192 million XRP, or $226 million, remains unswapped, and the main bitcoin and ether holdings have not moved. Issuers cannot freeze XRP or bitcoin the way they can many stablecoins, so the key question is whether THORChain operators and other bridges block the attacker addresses fast enough to slow the rest. About $3.11 billion remains in linked addresses, and a negligible amount has likely been cashed out.