Hacks News

THORSwap Temporarily Suspends Services, as a FTX Attacker Moves Stolen Funds via Threshold


Key Points

  • The FTX attacker has switched to utilize the Threshold Network Chain instead of using THORChain to convert stolen Ethereum into Bitcoin.
  • Since the wallet was revived last week, the attacker has switched about 75,000 ETH, totaling over $124 million.
  • THORSwap announced that it was entering “maintenance mode” because it did not want to participate in the “movement of illicit funds.”

CryptoCaster Quick Check:

Attackers on FTX were compelled to abandon their plan to exchange their illegal Ethereum holdings for Bitcoin. This action was taken in response to THORSwap’s decision to enter maintenance mode, which was based on the THORChain.


The FTX exploiter was no longer transferring the stolen assets via THORChain, according to a report from on-chain expert Lookonchain on October 6.

The FTX Attacker Changes Its Network

The attacker was instead exchanging the stolen money through the Threshold network. According to a screenshot from the analyst, the exploiter exchanged almost 3,000 ETH for tBTC via the Threshold Network Chain.

FTX Attacker Transactions. (Source: Lookonchain)

The protocol acts as a decentralized link between Bitcoin and Ethereum, claims the official tBTC website. It makes it easier to convert user assets into an ERC-20 token that is pegged 1:1 to bitcoin.


By using a cohort of randomly chosen node operators within the Threshold Network, this bridge does away with the necessity for centralized intermediates.

This strategy maintains a strong defense mechanism while enhancing the security of users’ valuables.

Stay in the know on crypto by frequently visiting Crypto News Today

For the first time in nearly a year, the FTX attacker transferred about $10 million in Ethereum last week, according to reports. The exploiter converted a total of 75,636 ETH worth $124 million into Bitcoin since then.
However, as of the time of publication, the attacker’s wallet still had 109,485 ETH, or around $180 million.

Notably, the transfer of the funds parallels the New York trial of Sam Bankman-Fried, the former founder of FTX.
The timing of the intrusion has led to rumors that an insider at FTX may have been responsible.

THORSwap Enters Maintenance Mode

The FTX attacker’s prior privacy tool of choice, THORSwap, disclosed that it was entering “maintenance mode” because it did not wish to aid in the “movement of illicit funds.”

Follow GappyCoin PreSale on Twitter, and ReCap for information and more.

THORSwap said the decision was made after consulting with advisors, legal counsel, and law enforcement organizations in a post on X on October 6. It read:

“The decision was made to temporarily transition the THORSwap interface into maintenance mode. This action was taken to swiftly curtail any further potential illicit activity. THORSwap will remain in this mode until a more permanent and robust solution can be implemented to ensure the platform’s continued security and integrity.”

The DEX added that this action will limit the platform’s entire coin-swapping functionality. However, the protocol still allows its users to borrow and stake assets.

In the meantime, THORChain stated that its activities are unaffected by THORSwap’s decision because its network is still fully functional and able to accommodate a range of interfaces.CRYPTOCASTER® - DECENTRALIZED FREEDOM!

We hope you appreciated this article. Before you move on, I was hoping you would consider taking the step of supporting CryptoCaster’s journalism. 

From  Elon Musk, Larry Fink(BlackRock) to Jamie Dimon(JP Morgan Chase) a number of billionaire owners have a powerful hold on so much of the hidden agendas’ which eludes the public concerning the paradigm shift juxtaposed by cryptocurrency and web3 emerging technologies. CryptoCaster is different. We have no billionaire owner or shareholders to consider. Our journalistic efforts are produced to serve the public interest in crypto development and institutional disruptions – not profit motives.

And we avoid the trap that befalls much U.S. and global media – the tendency, born of a desire to please all sides, to engage in false equivalence in the name of neutrality and retail consumer protection. While fairness and transparency dictates everything we do, we know there is a right and a wrong position in the fight against fiat global banking interest and monetary reconstruction precipitated by the emerging crypto ecology.

When we report on issues like the FTX, Binance and Ripple crisis, we’re not afraid to name who or what is uncovered. And as a crypto sentinel, we’re able to provide a fresh, outsider perspective on the global monetary disruption – one so often missing from the insular American and European media bubble. 

Around the world, readers can access the CryptoCaster’s paywall-free journalism because of our unique reader-supported model. That’s because of people like you. Our readers keep us independent, beholden to no outside influence and accessible to everyone – whether they can afford to pay for news and information, or not.

We thankyou for the on-going support our readers have bestowed monetarily. If you have not considered supporting CryptoCaster, if you can, please consider supporting us just once from $1 or more of Bitcoin (satoshi) or Eth, and better yet, support us every month with a little more. Scroll further down this page to obtain CryptoCaster’s wallet addresses.

Thank you.

Kristin Steinbeck
Editor, CryptoCaster

Please Read Essential Disclaimer Information Here.
© 2024 Crypto Caster provides information. CryptoCaster.world does not provide investment advice. Do your research before taking a market position on the purchase of cryptocurrency and other asset classes. Past performance of any asset is not indicative of future results. All rights reserved.

Contribute to CryptoCaster℠ Via Metamask or favorite wallet. Send Coin/Token to Addresses Provided Below.
Thank you!
BTC – bc1qgdnd752esyl4jv6nhz3ypuzwa6wav9wuzaeg9g
ETH – 0x7D8D76E60bFF59c5295Aa1b39D651f6735D6413D
MATIC – 0x7D8D76E60bFF59c5295Aa1b39D651f6735D6413D
LITECOIN – ltc1qxsgp5fykl0007hnwgl93zr9vngwd2jxwlddvqt


You may also like