THORChain binance flows: RUNE Drops 20% as Swaps Halt
THORChain binance flows put RUNE under pressure: about $48.3M in hack-linked assets swapped through the protocol before a reorg bug halted swaps on ten networks.
- TokenPost tallied about $48.3 million in hack-linked assets converted through THORChain, with roughly $42.7 million received after fees and slippage.
- The FBI, Secret Service and IRS-CI urged THORNode operators to block addresses tied to the TraderTraitor group.
- Founder John-Paul Thorbjornsen says taking the protocol offline would mean "the experiment is over."
in this block
THORChain binance flows are now the hottest fight in DeFi. RUNE fell about 20% over 24 hours and briefly traded below $0.50 on November 1 after on-chain data showed tens of millions in stolen Binance funds swapped through the protocol. Then a separate Ethereum reorg bug froze swaps on ten networks, which Chainalysis says accidentally slowed the North Korean launderers.
What actually happened
The Binance theft, the largest crypto hack on record, was blamed on North Korea's TraderTraitor unit by the FBI on October 31. We covered that attribution in fbi tradertraitor binance. The FBI said it expects the attackers to keep converting assets through DeFi and instant-swap services.
THORChain is one of the few venues where you can swap native BTC, ETH and other coins across chains without an account. That makes it useful for ordinary users, and also for launderers. TokenPost counted hack-linked flows of about 185.1 million TRX and 3.83 million USDT across roughly 2,697 deposits. About $5.7 million was lost to fees and slippage along the way.
On Saturday a different problem hit. At 11:34 UTC, a one-block Ethereum reorg removed a 10 ETH deposit that THORChain had already credited, Cointelegraph reported. The protocol refunded money it never really received, paid out an extra 10 ETH, and triggered an automatic pause.
Why the thorchain binance flows story matters
Node operators halted swaps involving assets on ten networks, including Bitcoin, Ethereum, Solana and Tron. Trading kept running on Avalanche, Base and XRP, according to the network status page cited by Cointelegraph.
Chainalysis said the pause "inadvertently delayed" the laundering of a significant amount of Binance funds, because nobody, including the hackers, could swap through most bridges. THORChain's own team warned that the reorg bug was now public and could be abused on any external chain reorg until fixed.
The Defiant notes the core tension: THORChain's controls allow broad trading halts, not blocking of specific addresses. So "block the hacker" in practice means "stop everyone." Co-founder Chad Barraford said node operators had no information beyond what is publicly available.
Neutral infrastructure is a feature right up until the FBI names you in a press release.
The market reaction
CoinGecko showed RUNE near $0.52 at 06:04 UTC (09:04 MSK) on November 2, down about 19% over 24 hours. That reverses an earlier pop: Cointelegraph reported RUNE jumped 13% right after the hack, when traders bet on higher swap fees.
That bet has a history. During an earlier Bitget hack, TokenPost notes, a surge in THORChain swaps lifted fees and the market treated it as good for revenue. This time the regulatory pressure is louder and arrived faster. Combined with a live bug, it flipped sentiment.
For context on how the wider market absorbed the hack, see memecoins binance hack, where we tracked how traders turned the theft into jokes and tokens within hours.
What to watch next
Three questions decide where this goes. First, when do nodes re-enable the halted chains, and with what fix for the refund bug? THORChain says nodes will turn chains back on "as they are deemed safe."
Second, do node operators make any public commitment on the FBI request? So far there is no clear pledge. A formal refusal would raise regulatory risk for anyone running a node from the US.
Third, how much stolen value is still waiting to move? Binance says about $3 billion was frozen in various places, but the rest is in the attackers' hands. Every new laundering route that opens will draw attention back to THORChain binance flows.
What to do as a reader
If you use THORChain for normal swaps, check the official network status before sending funds. A halted chain can leave a swap pending or refunded at a bad time.
If you hold RUNE, understand that the price now trades on policy headlines, not just volume. A clean relaunch could spark a relief bounce. A legal escalation could do the opposite.
Read the primary sources yourself, starting with Cointelegraph's report on the halt. Nothing here is investment advice.
Not financial advice. DYOR, ser.
