The Bitget hackers are currently using THORChain to facilitate cross-chain swaps of stolen Ethereum (ETH) into Bitcoin (BTC), effectively obfuscating the movement of millions in illicit assets. By leveraging THORChain’s decentralized liquidity pools, the attackers can exchange assets across different blockchains without needing a centralized intermediary or undergoing KYC checks. This 'chain-hopping' maneuver is a critical stage in their laundering process, aimed at distancing the funds from the initial exploit addresses on the Ethereum network.
This development marks a sophisticated escalation in the aftermath of the Bitget breach earlier in January 2026. Security analysts have observed the attackers moving ETH through a series of 'peel chains'—a technique involving multiple small transfers—before hitting the THORChain interface. Once the assets are converted to BTC, they are often funneled into mixers or high-privacy wallets, further complicating recovery efforts for the exchange and international law enforcement agencies.
From a regulatory perspective, this incident places renewed pressure on decentralized protocols that facilitate large-scale anonymous transfers. In the U.S., the Treasury Department and the SEC have been closely monitoring cross-chain bridges, viewing them as potential vulnerabilities in the global anti-money laundering (AML) framework. The use of THORChain in this high-profile hack may lead to increased calls for mandatory compliance features or blacklisting capabilities for node operators within decentralized environments.
For the broader crypto market, this activity creates localized sell pressure on Ethereum while increasing the volume of 'tainted' Bitcoin circulating through the ecosystem. Investors should closely monitor Bitget’s transparency reports and the addresses flagged by blockchain intelligence firms like Chainalysis. As the 2026 regulatory landscape for DeFi evolves, the ability of protocols like THORChain to remain permissionless while deterring illicit use will be a pivotal point of contention for US lawmakers and the crypto industry alike.