{"id":53101,"date":"2025-02-28T01:12:00","date_gmt":"2025-02-28T01:12:00","guid":{"rendered":"https:\/\/cointelegraph.com\/news\/thorchain-swap-explosion-to-1-b-in-two-days-amid-bybit-exploit"},"modified":"2025-02-28T04:47:19","modified_gmt":"2025-02-28T04:47:19","slug":"thorchain-swap-volume-explodes-past-1b-after-bybit-hack","status":"publish","type":"post","link":"https:\/\/emilynews.com\/blog\/?p=53101","title":{"rendered":"THORChain swap volume explodes past $1B after Bybit hack"},"content":{"rendered":"<p>THORChain, a crosschain swap protocol, is experiencing a surge in activity following the $1.4 billion exploit of cryptocurrency exchange Bybit.<\/p>\n<p>On Feb. 26, the protocol processed $859.61 million in swaps, marking its highest-ever daily volume, according to data from THORChain Explorer. The momentum continued on Feb. 27, adding $210 million (and counting), pushing total swap volume past $1 billion in under 48 hours.<\/p>\n<figure><img decoding=\"async\" title=\"\" src=\"https:\/\/s3.cointelegraph.com\/uploads\/2025-02\/01954690-390a-7fb2-bf0b-baf56750e87b\" alt=\"\" \/><figcaption>\n<p><em>THORChain swap volume has experienced a dramatic surge since the Bybit hack. Source: THORChain Explorer<\/em><\/p>\n<\/figcaption><\/figure>\n<p>THORChain enables direct asset swaps across different blockchains, such as exchanging Ether (ETH) for Bitcoin (BTC).<\/p>\n<p>Swapping stolen funds for Bitcoin has been a common tactic of the North Korean state-sponsored hacking group Lazarus. Blockchain analysts have previously reported that Lazarus often converts illicitly obtained digital assets into BTC to obscure their trail.<\/p>\n<p><em><strong>Related: <\/strong><\/em><em><strong>THORChain approves plan to restructure $200M debt<\/strong><\/em><\/p>\n<h2><strong>THORChain\u2019s chain of criticism<\/strong><\/h2>\n<p>The surge comes amid ongoing controversy for THORChain. In January, it paused Bitcoin and Ether lending after accumulating about $200 million in liabilities, triggering a debt restructuring plan. While lending was frozen, swaps have remained active.<\/p>\n<figure><img decoding=\"async\" title=\"\" src=\"https:\/\/s3.cointelegraph.com\/uploads\/2025-02\/0195469a-1276-7572-8d7f-4f96a947aa42\" alt=\"\" \/><figcaption>\n<p><em>Source: <\/em><em>Taylor Monahan<\/em><\/p>\n<\/figcaption><\/figure>\n<p>THORChain core dev Nine Realms engineer \u201cPluto\u201d came to the defense while advocating for responsible measures to address illicit activity. Pluto acknowledged that illicit funds have flowed through THORChain but added that the team has taken steps to help wallet and integration partners implement screening services.<\/p>\n<figure><img decoding=\"async\" title=\"\" src=\"https:\/\/s3.cointelegraph.com\/uploads\/2025-02\/0195468f-1611-7e67-8d17-62b89fb4fe40\" alt=\"\" \/><figcaption>\n<p><em>Source: <\/em><em>Pluto<\/em><\/p>\n<\/figcaption><\/figure>\n<p>THORChain\u2019s (RUNE) cryptocurrency has climbed 36.6% in the past week, CoinGecko data shows.<\/p>\n<h2><strong>Bybit hacks good actors and bad actors<\/strong><\/h2>\n<p>Bybit has launched a website to track the laundering of its stolen funds while offering a bounty to exchanges and entities that assist in freezing them. On Feb. 27, the site listed seven good actors and one bad actor, eXch.<\/p>\n<figure><img decoding=\"async\" title=\"\" src=\"https:\/\/s3.cointelegraph.com\/uploads\/2025-02\/01954692-477b-7c01-b2db-99e72888a6f9\" alt=\"\" \/><figcaption>\n<p><em>Bybit has named eXch as the sole bad actor. Source: <\/em><em>Lazarusbounty\/Bybit<\/em><\/p>\n<\/figcaption><\/figure>\n<p>No-Know Your Customer (KYC) swap service eXch has drawn criticism for refusing to freeze funds tied to the Bybit hack. EXch has denied laundering funds for North Korea.<\/p>\n<p><em><strong>Related: <\/strong><\/em><em><strong>From Sony to Bybit: How Lazarus Group became crypto\u2019s supervillain<\/strong><\/em><\/p>\n<p>The record-breaking Bybit exploit on Feb. 21 was attributed to North Korean state-sponsored hacking group Lazarus by ZachXBT, and later confirmed by the US Federal Bureau of Investigation.<\/p>\n<p>Third-party forensic investigations found that Lazarus Group stole Ether from Bybit by compromising SafeWallet credentials. Reports from Sygnia and Verichains revealed that a Safe developer\u2019s credentials were breached, allowing attackers to deceive signers into approving a malicious transaction.\u00a0<\/p>\n<p>According to Sygnia, the attack stemmed from malicious JavaScript injected into SafeWallet\u2019s AWS infrastructure. In response, SafeWallet developers rebuilt and reconfigured their infrastructure, implemented new security measures and rotated all credentials to prevent future attacks.<\/p>\n<p><em><strong>Magazine: <\/strong><\/em><em><strong>THORChain founder and his plan to \u2018vampire attack\u2019 all of DeFi<\/strong><\/em><\/p>\n<p>*********************************<\/p>\n<p>If one of the paying programs on our Monitor appeals to you, please support <em>EmilyNews<\/em> by registering for it on our website. Thanks very very much!<\/p>\n<p>EN web <strong>Support Chat<\/strong> | Hyips and Crypto questions \u2013 <strong><a style=\"color: #c03939; text-decoration: underline;\" href=\"http:\/\/emilynews.com\/chat\/hyips\/\">HyipChatEN<\/a><\/strong><\/p>\n<p>Telegram Chat for Crypto and Hyip reports: <strong><a href=\"https:\/\/telegram.me\/HyipChatEN\" target=\"_blank\" rel=\"noopener noreferrer\">@HyipChatEN<\/a><\/strong><\/p>\n<p>*********************************<\/p>\n<p>Be the first to get most important HYIP news everyday!<br \/>\nSimply Follow <a href=\"https:\/\/www.facebook.com\/EmilyNewsOnline\/\" target=\"_blank\" rel=\"noopener noreferrer\"><strong style=\"text-decoration: underline;\">EN Facebook<\/strong><\/a>, <a href=\"https:\/\/telegram.me\/CryptoHyipsEN\" target=\"_blank\" rel=\"noopener noreferrer\"><strong style=\"color: #c03939; text-decoration: underline;\">EN Telegram<\/strong><\/a>, <a href=\"https:\/\/twitter.com\/EmilyHyipNews\" target=\"_blank\" rel=\"noopener noreferrer\"><strong style=\"text-decoration: underline; font-size: 1.3em;\">EN Twitter<\/strong><\/a><br \/>\nor Subscribe to <strong><a style=\"color: #c03939; text-decoration: underline;\" href=\"https:\/\/feedburner.google.com\/fb\/a\/mailverify?uri=Emilynews\" target=\"_blank\" rel=\"noopener noreferrer\">EN Feedburner<\/a><\/strong> and submit your email address!<\/p>\n<p>If you like this article and want to support EN \u2013 please share it by using at least few of social media buttons below. Thanks and See you tomorrow!<\/p>\n<p><a href=\"https:\/\/emilynews.com\/blog\/wp-content\/uploads\/2020\/11\/Reminder2-1.jpg\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-13137\" src=\"https:\/\/emilynews.com\/blog\/wp-content\/uploads\/2025\/02\/Reminder2-1.jpg\" alt=\"\" width=\"544\" height=\"600\" \/><\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p> THORChain&#8217;s swap volume has hit record highs as the Bybit hack laundering frenzy continues. &#8230;<\/p>\n","protected":false},"author":1,"featured_media":53134,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5651],"tags":[5506,139,3544,3812,5652,276,10,159,97,7049],"class_list":["post-53101","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cryptonews","tag-altcoins","tag-bitcoin","tag-bitcoin-news","tag-cryptonews","tag-emilynews","tag-ethereum","tag-hyip","tag-hyipnews","tag-hyips","tag-thorchain","exalt-entry"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v24.3 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>THORChain swap volume explodes past $1B after Bybit hack - EmilyNews<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/emilynews.com\/blog\/?p=53101\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"THORChain swap volume explodes past $1B after Bybit hack - EmilyNews\" \/>\n<meta property=\"og:description\" content=\"THORChain&#039;s swap volume has hit record highs as the Bybit hack laundering frenzy continues. ...\" \/>\n<meta property=\"og:url\" content=\"https:\/\/emilynews.com\/blog\/?p=53101\" \/>\n<meta property=\"og:site_name\" content=\"EmilyNews\" \/>\n<meta property=\"article:published_time\" content=\"2025-02-28T01:12:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-02-28T04:47:19+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/emilynews.com\/blog\/wp-content\/uploads\/2025\/02\/thor.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"838\" \/>\n\t<meta property=\"og:image:height\" content=\"561\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Emilynews\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Emilynews\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/emilynews.com\/blog\/?p=53101\",\"url\":\"https:\/\/emilynews.com\/blog\/?p=53101\",\"name\":\"THORChain swap volume explodes past $1B after Bybit hack - EmilyNews\",\"isPartOf\":{\"@id\":\"https:\/\/emilynews.com\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/emilynews.com\/blog\/?p=53101#primaryimage\"},\"image\":{\"@id\":\"https:\/\/emilynews.com\/blog\/?p=53101#primaryimage\"},\"thumbnailUrl\":\"https:\/\/emilynews.com\/blog\/wp-content\/uploads\/2025\/02\/thor.jpg\",\"datePublished\":\"2025-02-28T01:12:00+00:00\",\"dateModified\":\"2025-02-28T04:47:19+00:00\",\"author\":{\"@id\":\"https:\/\/emilynews.com\/blog\/#\/schema\/person\/d198218498e05856be72796eea940a33\"},\"breadcrumb\":{\"@id\":\"https:\/\/emilynews.com\/blog\/?p=53101#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/emilynews.com\/blog\/?p=53101\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/emilynews.com\/blog\/?p=53101#primaryimage\",\"url\":\"https:\/\/emilynews.com\/blog\/wp-content\/uploads\/2025\/02\/thor.jpg\",\"contentUrl\":\"https:\/\/emilynews.com\/blog\/wp-content\/uploads\/2025\/02\/thor.jpg\",\"width\":838,\"height\":561},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/emilynews.com\/blog\/?p=53101#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/emilynews.com\/blog\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"THORChain swap volume explodes past $1B after Bybit hack\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/emilynews.com\/blog\/#website\",\"url\":\"https:\/\/emilynews.com\/blog\/\",\"name\":\"EmilyNews\",\"description\":\"EmilyNews Blog\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/emilynews.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/emilynews.com\/blog\/#\/schema\/person\/d198218498e05856be72796eea940a33\",\"name\":\"Emilynews\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/emilynews.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/080b41979dac9ab029c0867a1655bdaf?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/080b41979dac9ab029c0867a1655bdaf?s=96&d=mm&r=g\",\"caption\":\"Emilynews\"},\"url\":\"https:\/\/emilynews.com\/blog\/?author=1\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"THORChain swap volume explodes past $1B after Bybit hack - EmilyNews","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/emilynews.com\/blog\/?p=53101","og_locale":"en_US","og_type":"article","og_title":"THORChain swap volume explodes past $1B after Bybit hack - EmilyNews","og_description":"THORChain's swap volume has hit record highs as the Bybit hack laundering frenzy continues. ...","og_url":"https:\/\/emilynews.com\/blog\/?p=53101","og_site_name":"EmilyNews","article_published_time":"2025-02-28T01:12:00+00:00","article_modified_time":"2025-02-28T04:47:19+00:00","og_image":[{"width":838,"height":561,"url":"https:\/\/emilynews.com\/blog\/wp-content\/uploads\/2025\/02\/thor.jpg","type":"image\/jpeg"}],"author":"Emilynews","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Emilynews","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/emilynews.com\/blog\/?p=53101","url":"https:\/\/emilynews.com\/blog\/?p=53101","name":"THORChain swap volume explodes past $1B after Bybit hack - EmilyNews","isPartOf":{"@id":"https:\/\/emilynews.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/emilynews.com\/blog\/?p=53101#primaryimage"},"image":{"@id":"https:\/\/emilynews.com\/blog\/?p=53101#primaryimage"},"thumbnailUrl":"https:\/\/emilynews.com\/blog\/wp-content\/uploads\/2025\/02\/thor.jpg","datePublished":"2025-02-28T01:12:00+00:00","dateModified":"2025-02-28T04:47:19+00:00","author":{"@id":"https:\/\/emilynews.com\/blog\/#\/schema\/person\/d198218498e05856be72796eea940a33"},"breadcrumb":{"@id":"https:\/\/emilynews.com\/blog\/?p=53101#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/emilynews.com\/blog\/?p=53101"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/emilynews.com\/blog\/?p=53101#primaryimage","url":"https:\/\/emilynews.com\/blog\/wp-content\/uploads\/2025\/02\/thor.jpg","contentUrl":"https:\/\/emilynews.com\/blog\/wp-content\/uploads\/2025\/02\/thor.jpg","width":838,"height":561},{"@type":"BreadcrumbList","@id":"https:\/\/emilynews.com\/blog\/?p=53101#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/emilynews.com\/blog"},{"@type":"ListItem","position":2,"name":"THORChain swap volume explodes past $1B after Bybit hack"}]},{"@type":"WebSite","@id":"https:\/\/emilynews.com\/blog\/#website","url":"https:\/\/emilynews.com\/blog\/","name":"EmilyNews","description":"EmilyNews Blog","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/emilynews.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/emilynews.com\/blog\/#\/schema\/person\/d198218498e05856be72796eea940a33","name":"Emilynews","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/emilynews.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/080b41979dac9ab029c0867a1655bdaf?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/080b41979dac9ab029c0867a1655bdaf?s=96&d=mm&r=g","caption":"Emilynews"},"url":"https:\/\/emilynews.com\/blog\/?author=1"}]}},"_links":{"self":[{"href":"https:\/\/emilynews.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/53101","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/emilynews.com\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/emilynews.com\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/emilynews.com\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/emilynews.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=53101"}],"version-history":[{"count":2,"href":"https:\/\/emilynews.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/53101\/revisions"}],"predecessor-version":[{"id":53135,"href":"https:\/\/emilynews.com\/blog\/index.php?rest_route=\/wp\/v2\/posts\/53101\/revisions\/53135"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/emilynews.com\/blog\/index.php?rest_route=\/wp\/v2\/media\/53134"}],"wp:attachment":[{"href":"https:\/\/emilynews.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=53101"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/emilynews.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=53101"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/emilynews.com\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=53101"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}