The recent hack of the Bitget platform, which resulted in the theft of $387.5 million, has triggered an unprecedented clash over DeFi governance. In an attempt to mitigate the damage, Bitget’s management officially requested that THORChain block the attackers' addresses, as the perpetrators were using the protocol to swap their stolen assets into BTC. This request, aimed at curbing money laundering, was met with a categorical refusal from the cross-chain exchange protocol.
At the heart of this refusal lies THORChain's core architecture, designed to be fully permissionless. Unlike centralized platforms, the protocol lacks any native mechanism to ban a specific address without affecting the entire network. Its operators, while capable of temporarily suspending specific activities like liquidity flows or support for an entire blockchain, believe that targeting isolated wallets would betray the principles of immutability and neutrality that govern decentralized infrastructure, much like Bitcoin or Ethereum.
This situation highlights critical questions regarding the responsibility of Web3 actors in the face of cyberattacks. The February 2025 precedent, marked by a similar request from the FBI following the Bybit hack, had already crystallized tensions between regulatory demands and developer ethics. While THORChain has previously demonstrated its ability to halt operations to protect its own reserves during critical vulnerabilities, its refusal to intervene on behalf of a third party reignites the debate over the boundary between technological neutrality and necessary regulation. Some industry observers point to a perceived inconsistency, arguing that while the technical capability to shut down operations exists, it is reserved for the protocol’s own survival rather than restorative justice.
The implications of this case extend far beyond immediate financial losses, as Bitget has stated that its $464 million protection fund is sufficient to absorb the hit. The challenge is now philosophical and strategic: as international regulatory pressure intensifies to demand oversight tools within DeFi, infrastructures like THORChain are doubling down on their status as unstoppable networks. By refusing to act as a regulatory body, these protocols confirm their commitment to remaining neutral layers, yet they inevitably open themselves up to a fundamental questioning of their role within the global financial ecosystem.