Hacks News

THORSwap Temporarily Suspends Services, as a FTX Attacker Moves Stolen Funds via Threshold


Key Points

  • The FTX attacker has switched to utilize the Threshold Network Chain instead of using THORChain to convert stolen Ethereum into Bitcoin.
  • Since the wallet was revived last week, the attacker has switched about 75,000 ETH, totaling over $124 million.
  • THORSwap announced that it was entering “maintenance mode” because it did not want to participate in the “movement of illicit funds.”

CryptoCaster Quick Check:

Attackers on FTX were compelled to abandon their plan to exchange their illegal Ethereum holdings for Bitcoin. This action was taken in response to THORSwap’s decision to enter maintenance mode, which was based on the THORChain.


The FTX exploiter was no longer transferring the stolen assets via THORChain, according to a report from on-chain expert Lookonchain on October 6.

The FTX Attacker Changes Its Network

The attacker was instead exchanging the stolen money through the Threshold network. According to a screenshot from the analyst, the exploiter exchanged almost 3,000 ETH for tBTC via the Threshold Network Chain.

FTX Attacker Transactions. (Source: Lookonchain)

The protocol acts as a decentralized link between Bitcoin and Ethereum, claims the official tBTC website. It makes it easier to convert user assets into an ERC-20 token that is pegged 1:1 to bitcoin.


By using a cohort of randomly chosen node operators within the Threshold Network, this bridge does away with the necessity for centralized intermediates.

This strategy maintains a strong defense mechanism while enhancing the security of users’ valuables.

Stay in the know on crypto by frequently visiting Crypto News Today

For the first time in nearly a year, the FTX attacker transferred about $10 million in Ethereum last week, according to reports. The exploiter converted a total of 75,636 ETH worth $124 million into Bitcoin since then.
However, as of the time of publication, the attacker’s wallet still had 109,485 ETH, or around $180 million.

Notably, the transfer of the funds parallels the New York trial of Sam Bankman-Fried, the former founder of FTX.
The timing of the intrusion has led to rumors that an insider at FTX may have been responsible.

THORSwap Enters Maintenance Mode

The FTX attacker’s prior privacy tool of choice, THORSwap, disclosed that it was entering “maintenance mode” because it did not wish to aid in the “movement of illicit funds.”

Follow GappyCoin PreSale on Twitter, and ReCap for information and more.

THORSwap said the decision was made after consulting with advisors, legal counsel, and law enforcement organizations in a post on X on October 6. It read:

“The decision was made to temporarily transition the THORSwap interface into maintenance mode. This action was taken to swiftly curtail any further potential illicit activity. THORSwap will remain in this mode until a more permanent and robust solution can be implemented to ensure the platform’s continued security and integrity.”

The DEX added that this action will limit the platform’s entire coin-swapping functionality. However, the protocol still allows its users to borrow and stake assets.

In the meantime, THORChain stated that its activities are unaffected by THORSwap’s decision because its network is still fully functional and able to accommodate a range of interfaces.CRYPTOCASTER® - DECENTRALIZED FREEDOM!


e hope you enjoyed this article. Before you move on, we invite you to consider supporting CryptoCaster’s journalism.

Billionaire owners like Elon Musk, Larry Fink (BlackRock), and Jamie Dimon (JP Morgan Chase) often have a strong influence on the hidden agendas surrounding the paradigm shift brought about by cryptocurrency and emerging Web3 technologies. CryptoCaster stands apart. We have no billionaire owner or shareholders to please. Our journalism is dedicated to serving the public interest in crypto development and institutional disruptions, not profit motives.

We avoid the pitfall of much U.S. and global media, which often resorts to false equivalence in the name of neutrality and retail consumer protection. While fairness and transparency guide everything we do, we recognize that there is a right and wrong stance in the fight against fiat global banking interests and the monetary reconstruction driven by the emerging crypto ecology.

When we report on issues like the FTX, Binance, and Ripple crises, we’re not afraid to name names and uncover the truth. As a crypto sentinel, we offer a fresh, outsider perspective on global monetary disruption—something often missing from the insular American and European media bubble.

CryptoCaster’s paywall-free journalism is accessible worldwide thanks to our unique reader-supported model. This is made possible by readers like you. Your support keeps us independent, free from outside influence, and accessible to everyone, regardless of their ability to pay for news and information.

We are grateful for the ongoing monetary support from our readers. If you haven’t yet considered supporting CryptoCaster, please consider contributing just once from $1 or more in Bitcoin (satoshi) or Ether, or even better, support us monthly with a bit more. Scroll further down this page to find CryptoCaster’s wallet addresses.

Thank you.

Kristin Steinbeck
Editor, CryptoCaster

Please Read Essential Disclaimer Information Here.
© 2024 Crypto Caster provides information. CryptoCaster.world does not provide investment advice. Do your research before taking a market position on the purchase of cryptocurrency and other asset classes. Past performance of any asset is not indicative of future results. All rights reserved.

Contribute to CryptoCaster℠ Via Metamask or favorite wallet. Send Coin/Token to Addresses Provided Below.
Thank you!
BTC – bc1qgdnd752esyl4jv6nhz3ypuzwa6wav9wuzaeg9g
ETH – 0x7D8D76E60bFF59c5295Aa1b39D651f6735D6413D
MATIC – 0x7D8D76E60bFF59c5295Aa1b39D651f6735D6413D
LITECOIN – ltc1qxsgp5fykl0007hnwgl93zr9vngwd2jxwlddvqt


You may also like