DeFi

THORChain

Read

Key Points:
<ul>
 <li>Bybit hack funds were laundered through THORChain, ExCH, and OKX Web3 Wallet, with $1.4 billion in ETH stolen.</li>
 <li>77% of the stolen funds remain traceable, while 20% have gone dark, and 3% are frozen.</li>
 <li>THORChain processed 72% of the illicit funds, generating $5.5 million in fees from the laundering process.</li>
 <li>Community backlash grows as THORChain refuses to intervene, raising concerns about transparency and decentralization.</li>
</ul>
<figure class="wp-block-image aligncenter size-large">
 <a href="https://coincu.com/wp-content/uploads/2025/03/Bybit-Hack-Funds-77-of-Stolen-1.4B-Still-Traceable.jpg" rel="noopener noreferrer nofollow"><img src="https://coincu.com/wp-content/uploads/2025/03/Bybit-Hack-Funds-77-of-Stolen-1.4B-Still-Traceable-1024x576.jpg" alt=""></a>
 <figcaption>
 </figcaption>
</figure>
<a href="https://x.com/EmberCN/status/1896728373340303440" rel="noopener noreferrer nofollow">According to on-chain data</a>, hackers successfully laundered 499,000 ETH (worth $1.4 billion) stolen from <a href="https://coincu.com/323571-bybit-hack-causes-massive-1-4-billion-ether-loss/" rel="noopener noreferrer nofollow">Bybit</a>, marking one of the largest crypto heists in history. The laundering process began on February 21 and lasted 10 days.
This incident highlights the growing risks of decentralized finance (DeFi) platforms being exploited for money laundering. As regulators scrutinize protocols like THORChain, the case may set a precedent for how DeFi governance handles illicit transactions. This could prompt discussions on whether DeFi platforms should take proactive measures against unlawful activity or remain entirely permissionless.
<h2 class="wp-block-heading" id="strong-bybit-hack-funds-laundered-through-thorchain-and-exch-strong">Bybit Hack Funds Laundered Through THORChain and ExCH</h2>
Bybit CEO Ben Zhou <a href="https://x.com/benbybit/status/1896798476945744010" rel="noopener noreferrer nofollow">provided</a> updates on the stolen funds:
<ul>
 <li>77% of the ETH remains traceable.</li>
 <li>20% (79,655 ETH) has gone dark, meaning it is untraceable.</li>
 <li>3% of the funds have been frozen.</li>
</ul>
<figure class="wp-block-image aligncenter size-full">
 <a href="https://coincu.com/wp-content/uploads/2025/03/Bybit-CEO-Ben-Zhou-provided-an-executive-summary-of-the-stolen-funds.png" rel="noopener noreferrer nofollow"><img src="https://coincu.com/wp-content/uploads/2025/03/Bybit-CEO-Ben-Zhou-provided-an-executive-summary-of-the-stolen-funds.png" alt="Bybit CEO Ben Zhou provided an executive summary of the stolen funds."></a>
 <figcaption>
 Bybit CEO Ben Zhou provided an executive summary of the stolen funds.
 </figcaption>
</figure>
Additionally, 83% of the stolen funds (417,348 ETH or $1 billion) have already been converted into BTC, distributed across 6,954 wallets. This conversion is crucial before hackers attempt to liquidate the assets via exchanges, OTC, or P2P trading.
<h2 class="wp-block-heading" id="strong-thorchain-under-fire-for-processing-72-of-illicit-transactions-strong">THORChain Under Fire for Processing 72% of Illicit Transactions</h2>
The Bybit hack funds were primarily laundered through THORChain, a decentralized cross-chain swapping protocol. <a href="https://x.com/tayvano_/status/1896761187603497289" rel="noopener noreferrer nofollow">According to on-chain analytics</a>, THORChain processed:
<ul>
 <li>361,255 ETH (~72% of the stolen funds) without intervention.</li>
 <li>79,655 ETH (~16%) via ExCH, which has refused to cooperate with tracking efforts.</li>
 <li>40,233 ETH (~8%) via OKX Web3 Wallet, requiring further information from OKX.</li>
</ul>
<figure class="wp-block-image aligncenter size-large">
 <a href="https://coincu.com/wp-content/uploads/2025/03/Total-amount-of-ETH-processed-by-Bybit-hackers-through-THORChain-platform.jpg" rel="noopener noreferrer nofollow"><img src="https://coincu.com/wp-content/uploads/2025/03/Total-amount-of-ETH-processed-by-Bybit-hackers-through-THORChain-platform-1024x559.jpg" alt="Total amount of ETH processed by Bybit hackers through THORChain platform."></a>
 <figcaption>
 The total amount of ETH processed by Bybit hackers through the THORChain platform. Source: Dune Analytics.
 </figcaption>
</figure>
THORChain has benefited significantly from these transactions, earning $5.5 million in fees while processing $5.9 billion in total swaps. However, the protocol’s inaction against illicit activity has led to community backlash, with critics questioning its transparency, governance, and decentralization.
THORChain developers <a href="https://coincu.com/324756-thorchain-and-bybit-hack-crypto-laundering/" rel="noopener noreferrer nofollow">responded</a>, stating that the protocol operates as a fully decentralized system and does not have the means to blacklist addresses. This raises broader concerns over DeFi governance: Should decentralized platforms actively prevent money laundering, or would doing so undermine decentralization principles?
<h2 class="wp-block-heading" id="strong-market-impact-and-future-outlook-strong">Market Impact and Future Outlook</h2>
The mass liquidation of the Bybit hack funds has contributed to Ethereum’s sharp decline, with ETH prices dropping 13% from $2,526 to $2,030 during the laundering period.
<figure class="wp-block-image aligncenter size-large">
 <a href="https://coincu.com/wp-content/uploads/2025/03/ETH-token-price-movement-over-7-days-CoinMarketCap-screenshot-on-March-4-2025.png" rel="noopener noreferrer nofollow"><img src="https://coincu.com/wp-content/uploads/2025/03/ETH-token-price-movement-over-7-days-CoinMarketCap-screenshot-on-March-4-2025-1024x485.png" alt="ETH token price movement over 7 days, CoinMarketCap screenshot on March 4, 2025."></a>
 <figcaption>
 ETH token price movement over 7 days, CoinMarketCap screenshot on March 4, 2025.
 </figcaption>
</figure>
As exchanges and authorities attempt to track and freeze these assets, the coming weeks will be critical in preventing further liquidation of the stolen BTC. If successful, some funds may be recovered, but the incident highlights an ongoing issue in DeFi’s role in financial crime.
The Bybit hack funds case exposes major vulnerabilities in decentralized protocols like THORChain, which allow illicit actors to exploit blockchain technology. While DeFi’s permissionless nature is a core principle, this incident raises the question: Should protocols take responsibility for preventing money laundering, or does that contradict decentralization?
<figure class="wp-block-table">
 <table class="has-luminous-vivid-orange-color has-text-color has-link-color has-fixed-layout">
 <tbody>
 <tr>
 <td>DISCLAIMER:&nbsp;The information on<a href="https://coincu.com/" rel="noopener noreferrer nofollow"> this website</a> is provided as general market commentary and does not constitute investment advice. We encourage you to do your own research before investing.</td>
 </tr>
 </tbody>
 </table>
</figure> <a href="https://coincu.com/?p=325137" rel="noopener noreferrer nofollow">Read original article on coincu.com</a>

Bybit Hack Funds: 77% of Stolen $1.4B Still Traceable

Table of Contents

Coincu

Other articles published on Mar 4, 2025

Join our free newsletter for daily crypto updates!