AnswersPublished17 sources
Why the Binance Hack Turned THORChain Into a Test of Crypto Neutrality
After the FBI attributed Binance’s Oct. 29 theft of more than $6 billion to North Korea’s TraderTraitor, THORChain co founder JP Thor opposed shutting the protocol down.
Published byEdited with GPT-6 LunaImages generated with GPT Image 2
Research answer
Key takeaways
- After the FBI attributed Binance’s Oct. 29 theft of more than $6 billion to North Korea’s TraderTraitor, THORChain co founder JP Thor opposed shutting the protocol down.
AI Prompt
openai.comCreate a landscape editorial hero image for this Studio Global article: How did THORChain become a test case for whether permissionless crypto infrastructure should remain neutral when processing stolen funds aft. Article summary: THORChain became a test case because the FBI’s effort to stop stolen funds moving through crypto infrastructure collided with its co-founder’s opposition to taking a permissionless protocol offline. An unrelated technica. Topic tags: general, government, general web, user generated. Style: premium digital editorial illustration, source-backed research mood, clean composition, high detail, modern web publication hero. Use reference image context only for broad subject, composition, and topical grounding; do not copy the exact image. Avoid: logos, brand marks, copyrighted characters, real person likenesses, fake screenshots, UI text, readable text, watermarks, ch
The FBI’s appeal to crypto services to block transactions linked to Binance’s October 29, 2026, theft put THORChain’s permissionless design under scrutiny. The dispute was not simply whether the protocol should go offline: the FBI urged providers to block transfers linked to identified addresses, while co-founder JP Thor argued against taking THORChain offline. Then a separate technical problem paused swaps and inadvertently disrupted a route used to move the stolen funds.1
5
19
46
Why THORChain was drawn into the dispute
The FBI attributed the theft of more than $6 billion in virtual assets from Binance to North Korea, referring to the activity as “TraderTraitor.” The bureau said it was working with the U.S. Secret Service and IRS Criminal Investigation and described the stolen assets as being converted primarily into ether, with further laundering expected through DeFi and other services.1
The agencies’ appeal named crypto infrastructure providers among those asked to block transactions connected to the theft. A published address list included 608 Ethereum addresses, 19 Bitcoin addresses and one Solana address, according to reporting on the alert.5 THORChain became a focus because its cross-chain swaps provide a route for moving assets between networks.
19
That request should not be confused with a demand to shut down the entire protocol. The reporting on JP Thor’s comments says the alert sought transaction blocking, not a protocol-wide shutdown; his objection was to taking THORChain offline.19 He argued that doing so would end the experiment of operating a permissionless settlement system. The available reporting does not establish his position on blocking specific addresses.
19
A technical pause—not a law-enforcement decision
On October 31, an Ethereum block reorganization exposed a refund error involving a 10 ETH deposit. THORChain said its automatic solvency checker detected that a vault had paid out ETH it never received; node operators halted Ethereum transaction signing and then paused other chains while developers investigated.31
Chainalysis reported that the emergency pause prevented users—including the attackers—from making cross-chain swaps through much of the protocol, delaying laundering of Binance-linked funds.46 The distinction matters: the interruption was a technical safety response, not evidence that THORChain had complied with the FBI’s request.
18
31
The incident made the trade-off tangible. A broad pause can disrupt suspicious transfers, but it also affects other users who rely on the same infrastructure. In this case, the pause was triggered by a solvency issue rather than a discretionary decision to block particular funds.31
A pause did not close every route
The disruption affected THORChain’s swaps, not every service capable of moving funds across networks. Subsequent reporting described a Binance-linked wallet swapping approximately 970,522 SOL, valued at $95.9 million, into Bitcoin through Relay.49 That report illustrates why stopping one route is not the same as stopping all movement of funds.
The episode therefore exposed two separate limits: a permissionless protocol may resist discretionary transaction screening, while a technical shutdown can interrupt activity broadly without deciding which users or transfers are legitimate. The sources do not establish that the FBI’s appeal caused THORChain’s pause or that the pause permanently stopped laundering.18
31
46
What the episode says about crypto neutrality
THORChain became a test case because the dispute forced a practical question: does neutrality mean processing transactions without discretionary censorship, even when funds are publicly identified as stolen, or should infrastructure operators intervene to help block them? JP Thor’s opposition to a protocol-wide shutdown framed the first position; the FBI’s appeal to service providers reflected the second.5
19
The accidental pause did not settle that debate. It showed that operational controls can disrupt laundering, but also that broad controls affect users beyond the targeted funds. The evidence supports that narrower conclusion—not a claim that THORChain accepted the FBI’s request, that the protocol could selectively block every identified transfer, or that the interruption ended the attackers’ access to cross-chain services.18
31
46
49
Studio Global AI
Continue your research
This page includes a source-backed answer you can continue inside Studio Global.
People also ask
What is the short answer to "Why the Binance Hack Turned THORChain Into a Test of Crypto Neutrality"?
After the FBI attributed Binance’s Oct. 29 theft of more than $6 billion to North Korea’s TraderTraitor, THORChain co founder JP Thor opposed shutting the protocol down.