Crypto World
THORChain decentralization challenged over DPRK flows
GoPlus Security has challenged THORChain’s decentralization claims, arguing that its validator-controlled vaults and emergency mechanisms give node operators powers that differ from Bitcoin and Ethereum.
Summary
- GoPlus argues THORChain validators can halt signing, challenging comparisons with Bitcoin and Ethereum decentralization models.
- THORChain documentation allows emergency pauses, chain-specific signing halts and Mimir votes when funds face risks.
- FBI attributed the 2025 Bybit theft to North Korea and urged services to block transactions.
- THORChain halted its network after a May exploit drained approximately $10.7 million from one vault.
- GoPlus claims Bitget-linked funds have moved through THORChain while North Korean attribution remains unconfirmed publicly.
GoPlus Security said on Sept. 27 that THORChain should not compare its cross-chain architecture directly with decentralized Layer 1 networks when explaining why stolen funds cannot be blocked. The firm pointed to THORChain’s threshold-signature vaults, active validator set and emergency governance controls.
Its criticism follows renewed scrutiny over stolen funds routed through THORChain after the Bitget breach. GoPlus claims around 101.5 BTC linked to the incident had already exited through the protocol, while another 27.63 million XRP was being routed toward Bitcoin.
Bitget has not publicly confirmed that North Korean actors carried out its September attack. The exchange said investigators had seen preliminary IP and VPN similarities associated with previous North Korean-linked activity, but attribution remained unconfirmed, as crypto.news reported after the Bitget breach.
THORChain validators can halt signing during emergencies
GoPlus based part of its argument on controls documented by THORChain itself. THORChain’s emergency procedures state that a node operator can issue a make pause command when funds face a critical threat. One pause lasts 720 blocks, or roughly one hour, while additional nodes can extend the halt.
Node operators can then vote on more targeted measures through Mimir, the protocol’s on-chain parameter system. THORChain documentation lists trading halts, chain-specific stops and signing controls among the available emergency actions.
GoPlus argued that these controls distinguish THORChain from Bitcoin or Ethereum base-layer consensus. THORChain uses threshold signatures to authorize outbound transactions from shared vaults, meaning participating nodes collectively manage the signing process for cross-chain swaps.
THORChain describes the same mechanism as a security design intended to distribute control among independent node operators rather than place vault keys with one entity.
The protocol’s own May exploit report says operational Mimir parameters can activate after three node votes. Four votes can overturn the decision, while another five can reinstate it. Economic parameters require a two-thirds supermajority.
GoPlus cited those features when arguing that THORChain has mechanisms capable of stopping specific flows when operators believe funds are at risk.
May exploit showed THORChain can coordinate a halt
THORChain used those controls during its own security incident on May 15.
A malicious validator exploited weaknesses in the protocol’s GG20 Threshold Signature Scheme and reconstructed the private key for one Asgard vault. Approximately $10.7 million was drained before the network fully stopped.
Automatic solvency monitoring first detected irregular vault balances and halted signing and trading on several chains. Node operators then coordinated through Discord and used manual pauses and Mimir votes to stop trading, signing, chain observation and validator churning.
THORChain’s official exploit report says roughly 18 to 20 nodes stacked pause commands during the response. A complete controlled halt was reached within around two hours after community members raised the alarm.
The network remained offline for roughly five weeks. Trading resumed June 23 after patched signing code, vault checks and governance-approved recovery procedures were introduced.
As crypto.news reported when trading resumed, THORChain restored swaps, signing, churning and liquidity operations after completing its restart process.
GoPlus referred to that intervention as evidence that THORChain operators possess working tools for stopping network activity when security concerns reach an emergency threshold.
Bybit laundering dispute remains central to the argument
The disagreement over illicit transactions dates back to the February 2025 Bybit hack. The FBI formally attributed the theft of approximately $1.5 billion in virtual assets from Bybit to North Korea. Its public notice identified the activity as part of the TraderTraitor campaign.
The agency specifically encouraged exchanges, bridges, RPC operators, DeFi services and blockchain companies to block transactions involving addresses connected with the stolen assets.
Much of the stolen Ethereum was later converted into Bitcoin through cross-chain services. Bybit CEO Ben Zhou said around 72% of roughly $900 million in converted assets had passed through THORChain.
Crypto.news reported in March 2025 that the attackers converted most of the stolen 499,000 ETH within ten days, with THORChain handling a large share of the swaps.
Early in that laundering period, THORChain recorded $2.91 billion in trading volume and roughly $3 million in fee revenue over five days, according to on-chain data cited by crypto.news.
GoPlus’s new post uses a later estimate of roughly $5.9 billion in volume and $5.5 million in fees. Those figures are the security firm’s calculation and have not been confirmed in THORChain financial disclosures.
Earlier THORChain vote to block flows was reversed
The Bybit episode produced an internal dispute among THORChain contributors and validators. In February 2025, three validators voted to halt Ethereum trading as stolen Bybit funds moved through the protocol. Developer Oleg Petrov later said the action was reversed within minutes.
Core contributor Pluto subsequently said he would stop contributing to THORChain. Validator TCB said at the time that he could leave as well unless the network developed a way to stop North Korean-linked flows.
THORChain founder John-Paul Thorbjornsen supported continued trading and opposed allowing a non-authority third party to dynamically update protocol-level deny lists.
Thorbjornsen said he would support nodes using static deny lists based on official OFAC or FBI information if individual operators were comfortable doing so.
GoPlus now argues that official government attribution provides a stronger basis for intervention than dynamic lists maintained by private security companies.
The FBI’s 2025 Bybit notice explicitly asked private-sector virtual asset services to block transactions involving or derived from the listed TraderTraitor addresses.
Bitget flows renew the decentralization dispute
GoPlus brought the earlier arguments back into focus after the September Bitget breach. The firm claims approximately 101.5 BTC worth around $8.5 million has already exited through THORChain from Bitget-linked flows. It said another 27.63 million XRP, valued near $43 million, was moving through swaps toward Bitcoin.
Those numbers come from GoPlus’s tracing and should be treated as the security company’s analysis rather than figures confirmed by Bitget or THORChain.
Bitget has raised its confirmed estimate of assets transferred to attacker-controlled addresses to approximately $387.5 million. The exchange has begun offering recovery bounties and plans to restore withdrawals in stages from Sept. 28. Crypto.news reported the updated loss and bounty program on Sept. 26.
GoPlus said THORChain could use its existing emergency framework for funds tied to addresses officially identified by agencies such as the FBI or OFAC.
THORChain’s documented emergency procedures define a critical event as one in which funds in pools or vaults face an attack or another threat to protocol security. The documentation tells node operators to initiate pauses and vote on targeted emergency actions under those conditions.
Whether the same framework should be applied to externally stolen assets moving through THORChain is the point of dispute raised by GoPlus. THORChain’s published procedures describe technical security emergencies but do not state that every third-party theft automatically requires a protocol halt.
Crypto World
Claude AI Predicts XRP Could Hit $10 in 2026: How Does it Get There
In ideal bull-market conditions, Anthropic’s Claude AI predicts Ripple (XRP) could hit $10, assuming sustained liquidity, expanding ETF inflows, regulatory progress, and growing institutional use of the XRP Ledger.
Claude’s bull-case target for XRP sits between $5.50 and $8.50, with a target of $6.50–$7.50, assuming a strong crypto bull market through late 2026.
As of September 25, 2026, XRP trades near $1.55–$1.62, benefiting from broader market strength following Bitcoin’s breakout. Optimistic forecasts, such as Standard Chartered’s target of ~$7, hinge on sustained liquidity, ETF inflows, regulatory progress, and increased institutional use of the XRP Ledger.

The current market signals the early stages of a sustained bull run, driven by improved macro conditions and capital rotation into large-cap altcoins.
Historical trends suggest XRP could rise significantly alongside Bitcoin, with potential moves up to the mid-to-high single digits in a bullish environment. However, this remains speculative and dependent on market conditions.
Technical Analysis Supporting the Claude Prediction
On the higher timeframes, XRP has staged a strong multi-week rebound from mid-September lows near $1.25–$1.30, reclaiming key moving averages and pushing through successive resistance levels into the $1.55–$1.62 zone.
A sustained break and weekly close above $1.65–$1.70 (with volume confirmation) would further confirm the intermediate bullish structure, opening the path toward the prior cycle high near $3.65.
In a full bull-market regime led by Bitcoin’s recovery, reclaiming that prior high often acts as a powerful psychological and technical catalyst for further extension.
Fibonacci projections and measured moves from the multi-year base and recent recovery low project into the $5.50–$8.50 zone on continued momentum.
RSI has improved from oversold levels into constructive territory, price is holding firmly above clustered support from the 50-/100-/200-day averages, and the broader risk-on shift supports trend continuation.
Key supports to defend on any retests include the $1.45–$1.50 zone and the broader $1.30–$1.40 area; a decisive break below those would weaken the near-term recovery thesis.
Overall, the chart setup favors a multi-leg advance with strong upside potential as risk appetite builds, consistent with XRP’s historical pattern of sharp rallies once key resistances clear in bull-market conditions.
LiquidChain Targets Early Mover Upside as Claude AI Predicts $10 XRP
Anyone holding XRP from the sub-$1 range is in a comfortable spot. But buying in now, chasing a token already up +19% over seven days and pressing into resistance at $1.50, is a different risk calculus entirely; the easy money on this leg has largely been made.
That’s pushing some traders toward earlier-stage plays with more room to run, and cross-chain infrastructure is one of the more active corners of that search right now.
LiquidChain (LIQUID) is building a Layer 3 execution environment designed to fuse Bitcoin, Ethereum, and Solana liquidity into a single unified layer, a “deploy-once, access-all” model for developers tired of fragmenting liquidity across chains.
The presale is priced at $0.014958 per token, with over $971,000 raised to date. Core features include single-step execution and verifiable settlement, designed to remove bridging friction between ecosystems.
Gain Special Access to Layer 3 Trading Here
The post Claude AI Predicts XRP Could Hit $10 in 2026: How Does it Get There appeared first on Cryptonews.
Crypto World
Bitcoin ETF Comeback: $2.4B Week Flips Year-to-Date Flows Positive
It was hard to imagine after June ended and the massive outflows recorded within the first six months of the year, but the spot BTC ETFs have managed to turn the tables and are actually well in the green now YTD.
The spot Ethereum ETFs have erased last week’s losses, and the cumulative net inflows are up to nearly $14 billion again.
BTC ETFs Back in Green YTD
As reported earlier this week, the Monday numbers set a multi-month record in terms of daily inflows as investors inserted almost $1 billion within a single trading session. Although the inflows declined by the end of the week, they were still in the green. $714.75 million entered the funds on Tuesday, another $346.98 million on Wednesday, $190.65 million on Thursday, and $134.47 million on Friday.
Consequently, this pivotal week ended with $2.39 billion in net inflows for the spot Bitcoin ETFs, pushing the cumulative total net inflows to $57.55 billion. As mentioned above, the YTD numbers have turned green, which was nearly impossible after June. At the time, investors pulled out a record $4.51 billion from the funds, which followed a painful May with $2.43 billion in net outflows. YTD, the funds were nearly $5.5 billion in the red.
However, the narrative shifted in July with a modest $172 million in net inflows, but it skyrocketed in August and September. The ETFs attracted $3.52 billion in August and are up by $2.7 billion so far in September. As such, the 2026 numbers are at $925 million in the green.
At the same time, though, the underlying asset remains 40% away from its all-time high. Crypto Rover believes this difference won’t last long, as “institutional money is accumulating like never before and has shortened the bear market dramatically.”
THIS IS INSANE:
Bitcoin is still more than 40% away from its all time high.
Meanwhile, spot cumulative ETF flows are only 10% away from their all time highs.
Institutional money is accumulating like never before and has shortened the bear market dramatically. pic.twitter.com/39ztaA4AFI
— Crypto Rover (@cryptorover) September 26, 2026
ETH ETFs in Green Too
The exchange-traded funds tracking the largest altcoin also enjoyed a strong start to the business week, gaining almost $270 million on Monday. They also saw green-only in the following four trading days and ended with $689.88 million in net inflows. Thus, they offset all the losses from the previous business week by a large margin and hit a new multi-month high in terms of cumulative net inflows of $13.94 billion.
Meanwhile, the underlying asset touched $2,800 during the week but was stopped there and now trades at around $100 lower.

The post Bitcoin ETF Comeback: $2.4B Week Flips Year-to-Date Flows Positive appeared first on CryptoPotato.
Crypto World
Quant Crypto Blasts 3x in a Week Following Huge US Bank Deal
Quant crypto has exploded roughly +178% over the last seven days, including an extraordinary +72% daily surge. Quant is quickly becoming the most talked-about cryptocurrency, as its price action is tied to a major deal with US banks.
At press time, Quant is trading around $178.46, though the price is moving extremely quickly amid unusually intense volatility.

(SOURCE: TradingView / Quant Crypto)
Unlike many sudden surges in the crypto market, this excitement is fueled by a major fundamental development. Quant has secured a significant role in The Clearing House’s upcoming on-chain payments infrastructure in the United States.
This builds on its previous work with major UK banks. However, the chart shows valid reasons for caution after the price rose rapidly from around $65 to nearly $200.
What is the Major U.S. Banking Deal that Has Caused the +200% Quant Price Surge?
The biggest catalyst for this development occurred when The Clearing House announced on September 24 that it had chosen Quant to power its On-Chain Money Initiative. Quant will provide the network’s interoperability, orchestration, and transaction management layer.
This infrastructure is designed to enable financial institutions to clear and settle tokenized deposits while integrating with existing payment systems, including RTP and CHIPS. The network is expected to be available to participating institutions during the first half of 2027.
The Clearing House’s scale helps explain why crypto traders reacted so strongly. Its U.S. payment networks clear and settle over $2 trillion every day. In 2025 alone, CHIPS averaged approximately $2.014 trillion in daily payment value.
Quant isn’t directly processing $2 trillion worth of transactions. That figure refers to the scale of The Clearing House’s existing payment networks.
Quant has been selected to provide the technology for the new On-Chain Money Initiative, which is scheduled to launch next year. Nevertheless, this partnership places Quant’s technology in close proximity to major U.S. banking infrastructure.
Never Miss a Swing Again: Use AI Copy Trading Bots From CryptoHopper
The U.S. Deal Follows Quant’s Work With Major UK Banks
UK Finance has selected Quant, along with several banks, including Barclays, HSBC, Lloyds Banking Group, NatWest, Nationwide, and Santander, to provide infrastructure for the UK’s tokenized sterling deposits project.
This initiative involves live transactions of tokenized commercial bank deposits and ensures interoperability between bank ledgers and existing payment systems.
Now, Quant (QNT) is shifting its focus from major banking projects in the UK to a potentially significant role in U.S. tokenized deposits. The Clearing House has highlighted Quant’s experience delivering on-chain capabilities in regulated environments.
For traders, this progression presents a compelling narrative: UK banking infrastructure is paving the way for U.S. banking infrastructure, especially as tokenization and programmable money become increasingly important trends.
However, investors should be aware that adopting Quant’s technology does not necessarily translate into a direct increase in demand for the QNT token.
While the banking partnership is undoubtedly significant for Quant and its technology, the overall impact on QNT’s token economics remains a distinct consideration.
Supercharge Your Trading in 2026 With BloFin AI Trading Bots
Quant Crypto Price Goes Parabolic: What Comes Next?
Throughout most of the displayed period, QNT traded within a relatively limited range. The price lingered between approximately $60 and $80 for several months, with the 200-day moving average positioned around $69.40.
QNT first broke through the $70-$80 range before rapidly climbing past $100. Following that, the price surge became nearly vertical, with QNT soaring through $120, $150, and $170, eventually reaching a high around $194.
Currently, at approximately $178, QNT is significantly above its 200-day moving average. While this doesn’t necessarily mean the rally will end immediately, prices can stay elevated longer than traders expect when a strong narrative meets speculative demand.
However, the gap between QNT’s current price and its underlying technical structure has reached an extreme level. There is very little recent price action to reference between roughly $100 and the current price, as QNT moved through that range too quickly.
This lack of established price structure can pose challenges during a reversal, as there are fewer areas where buyers previously accumulated positions.
Don’t Miss Out on Our $1,000 USDT Airdrop on ByBit
The post Quant Crypto Blasts 3x in a Week Following Huge US Bank Deal appeared first on Cryptonews.
Crypto World
Wall Street Giant Warns AI Agents Could Trigger a New Kind of Bank Run
AI agents such as Meta’s Muse could soon pull cash out of bank accounts paying 0.1% and into accounts paying up to 5%, Apollo chief economist Torsten Sløk warned on Sunday.
AI agents are assistants that can act for a user, not just answer questions. Sløk says that at scale, the shift could strip banks of the cheap deposits they lend out.
How Much a 0.1% Bank Account Costs You
On a $10,000 balance, a 0.1% checking account earns about $10 a year. At 5%, the same money earns about $500.
Sløk’s note lists 11 fintech and online accounts paying between 3.3% and 5%. Adelfi tops the chart at 5%, followed by SoFi at 4.5%. The Federal Deposit Insurance Corporation (FDIC) national averages it cites are 0.4% for savings and 0.1% for checking.
Banks pay savers little and lend the money out at higher rates. That difference is a core source of their profit.
“If every household used AI agents to optimize the return on their cash balances, banks could lose a large share of the cheap deposits they rely on to make loans, which would be a problem for the entire financial system,” read an excerpt in the report.
Can Muse Move Your Money Yet?
Meta launched Muse on September 8. Plaid, the data firm that connects it to more than 12,000 US financial institutions and apps, says users can see balances, transactions, investments, and mortgage details through the agent.
Plaid’s announcement does not say Muse can move money between accounts. Sløk describes the sweep as something that “could soon” happen, and his warning rests on every household using such agents.
Interest in the agent is climbing. On Thursday, JPMorgan raised its Meta target and said Muse could become the most widely used consumer AI app since ChatGPT.
Market Watchers Say Savers Are Already Moving Cash
Mike Zaccardi, a chartered financial analyst, says he already keeps his own cash in BOXX, an exchange-traded fund that aims to earn returns close to short-term Treasury bills.
“Is an Agentic Bank Run Coming? AI assistants are about to auto-sweep cash from 0.1% checking accounts into 5% yields. If everyone adopts them, banks lose their cheap deposit base… risking a systemic crunch,” wrote Zaccardi.
Nate Geraci, co-founder of the ETF Institute, said AI and crypto are both coming for the traditional banking model. He urged politicians to embrace the change rather than fight it.
Washington is already fighting over who gets to pay savers. Stablecoin yield is one of the issues in the push to revive the Clarity Act crypto bill, which failed a Senate procedural vote on September 15.
Sløk’s note does not estimate how much cash could move, or how fast.
The post Wall Street Giant Warns AI Agents Could Trigger a New Kind of Bank Run appeared first on BeInCrypto.
Crypto World
Japan arrests two suspect over 81M yen crypto police scam
Japanese police have arrested two people suspected of helping a fake police fraud group steal cryptocurrency worth approximately 81 million yen from a woman in her 40s.
Summary
- Japanese police arrested two suspects over a scheme allegedly stealing 81 million yen in cryptocurrency.
- Police believe the fraud group operated from Cambodia and targeted a woman in her forties.
- Investigators say the suspects’ linked cases caused confirmed losses totaling approximately 240 million yen overall.
- Japan recorded 617.1 billion yen in fake police scam losses through July this year nationally.
- Authorities believe a Chinese national directed the operation from a suspected Cambodia-based fraud center overseas.
FNN reported on Sept. 25 that police arrested 31-year-old Saki Okayama and 38-year-old Mitsuki Minamisawa on suspicion of involvement in the scheme. Investigators believe the group operated from Cambodia and impersonated Japanese police officers to pressure victims into transferring assets.
The victim was allegedly told that her bank card had been connected to a large money laundering investigation. According to police information cited by FNN, the group claimed a fraud case had caused 600 billion yen in losses and that around 400 accounts had been used to launder funds.
Fake police allegedly demanded proof of innocence
The scheme began with a telephone call from a man claiming to represent the Osaka Prefectural Police.
FNN reported that the caller told the woman her card appeared among accounts connected with the supposed money laundering investigation. The caller then claimed she was close to being arrested and needed to “prove her innocence.”
Police allege that the false accusation eventually led the victim to transfer cryptocurrency worth around 81 million yen. The assets were valued at approximately $515,000 using the conversion cited in reports on the case.
Investigators have not publicly identified the cryptocurrencies involved or disclosed the wallet addresses that received the assets. Available reporting therefore does not establish how the cryptocurrency was subsequently moved, converted or withdrawn.
The Tokyo Metropolitan Police Department believes Okayama and Minamisawa participated in a larger organization. Known losses from fraud cases involving the two suspects have reached approximately 240 million yen, according to FNN.
Police suspect the group maintained its operational base in Cambodia, more than 4,000 kilometers from Japan. Investigators believe a Chinese national acted as the person directing the operation.
The available FNN report does not state that either suspect has been convicted. Both remain suspects in the investigation, and the allegations concern their suspected involvement in the fraud network.
Japan fake police scams are causing rising losses
The arrests come during a sharp increase in losses from people impersonating police officers throughout Japan.
Japan’sv National Police Agency reported that fake police scams caused 61.71 billion yen in losses during the first seven months of 2026. Authorities recorded 5,422 cases through the end of July.
Although the number of cases fell 6.4% from the same period a year earlier, financial losses increased 25.7%. Fake police schemes therefore remained one of Japan’s most costly forms of special fraud.
The National Police Agency began treating fake police fraud as a separate category in its 2026 statistics because the method had become increasingly common. Its data shows total special-fraud losses reached 210.81 billion yen through July, up 42.9% from a year earlier.
During the first half of the year, fake police scams caused 50.79 billion yen in losses. The average completed case cost victims around 11.64 million yen, according to police statistics.
The 81 million yen allegedly taken in the latest cryptocurrency case was therefore substantially above that first-half average.
Police have documented repeated cases in which impersonators tell victims that they are under investigation, that an arrest warrant exists or that their money must be transferred to establish innocence.
A separate Sept. 25 case involved a man in his 70s who lost approximately 73 million yen after callers claiming to represent the Tokyo Metropolitan Police Department asked him to move money to prove he was innocent. Police stressed that investigators do not instruct people to transfer money to designated accounts.
Cryptocurrency is becoming part of Japanese fraud controls
Japanese regulators have been strengthening controls where fraud proceeds move through cryptocurrency exchanges.
Japan’s Financial Services Agency and National Police Agency asked exchanges in August to consider withdrawal delays and stronger checks on newly registered wallet addresses.
The proposed controls include waiting periods before new withdrawal addresses can be used, stronger transaction monitoring and restrictions when account behavior appears inconsistent with a customer’s normal activity.
Authorities have separately asked exchanges to improve phishing-resistant authentication and respond more quickly when police identify suspicious transactions.
The request followed rapidly rising fraud losses. National Police Agency figures showed 18,067 special-fraud cases and 151.47 billion yen in losses through May. Fake police schemes accounted for 40.32 billion yen of that amount.
Japan’s police have warned specifically about cryptocurrency investment scams. An updated Metropolitan Police notice says authorities continue receiving reports from people persuaded through social networks and matching applications to transfer cryptocurrency to fraudulent investment platforms.
A separate September case in Gifu involved a woman in her 70s who was allegedly told by people posing as police and prosecutors to convert assets into cryptocurrency for an investigation. She lost cryptocurrency worth 39.29 million yen and another 2 million yen in cash, according to police reporting.
Cambodia link points to a larger regional enforcement issue
The suspected Cambodia base in the 81 million yen case fits a pattern authorities throughout Asia have been investigating involving fraud operations run from overseas compounds.
Japan arrested an alleged senior Prince Group figure in June as authorities examined links between the Cambodia-based conglomerate and international fraud networks. Tokyo police arrested Hu Xiaowei over an alleged false residency registration while investigating his activities in Japan.
The current fake police case has not been publicly linked to Prince Group, and available police reporting does not identify the suspected Cambodia location or organization behind the operation.
Other Asian authorities have found Cambodia connections in separate cryptocurrency fraud investigations. South Korean police arrested 23 people in June over an alleged USDT laundering operation serving a Cambodia-based phishing network.
South Korean investigation involved 16.8 billion won in suspected laundering activity and more than 11,000 bank accounts.
Cambodia has meanwhile moved to strengthen criminal penalties targeting online scam operations. Its Senate approved legislation in April covering people involved in scam compounds and related organized fraud activity.
Cambodian legislation as authorities faced increased pressure over fraud centers operating in the country.
Tokyo police continue investigating the organization behind the latest case, including the suspected Chinese director and the group’s Cambodia-based operations. FNN reported that confirmed fraud losses involving the two arrested suspects currently total approximately 240 million yen.
Crypto World
THORChain Refuses to Block Assets Tied to Bitget Hackers
Hackers stole $387.5 million from crypto exchange Bitget on September 24. Part of it is now being turned into Bitcoin through THORChain, which refuses to block it.
THORChain lets anyone swap a coin on one blockchain for a coin on another, with no ID check. Once it becomes Bitcoin, no company can freeze it.
Bitget Asks THORChain to Turn the Hacker Away
The hacker’s wallets are public and tracked. Bitget CEO Gracy Chen asked THORChain to refuse them.
“Decentralization is a design principle, not a shield for facilitating known stolen funds. The industry is watching,” she said.
Blockchain tracker MistTrack says this has happened before. After the $1.46 billion Bybit hack last year, nearly $1.2 billion was reportedly traced through THORChain.
THORChain Says It Is No Different From Bitcoin
THORChain pushed back. It calls itself permissionless, open to anyone, just like Bitcoin, Ethereum, and BNB Chain.
“What responsibility should Bitcoin, Ethereum, and BNB Chain bear when handling known stolen funds?” the team stated.
This response questions what responsibility those base blockchains bear for handling known stolen funds, deflecting calls for THORChain to block or monitor illicit flows.
It highlights core crypto tensions between permissionless cross-chain swapping on THORChain and industry demands for protocols to address publicly tracked hacker addresses.
THORChain Has Hit Pause Before
Star Xu, founder of rival exchange OKX, called THORChain’s Bitcoin comparison “False!” This follows a May incident where THORChain paused a vault after roughly $10 million was drained, its own report shows.
“A network that can stop when its own funds are at risk, but refuses to do so when someone else’s funds are at risk, is not “like Bitcoin,”” the OKX executive slammed.
May was not the first time. Nodes rapidly halted the network after a 2021 hack. In January 2025, they voted to freeze its lending and savings products.
Further, a sanctioned state, North Korea, already used THORChain to move over $1 billion from Bybit. Researchers and Bybit itself traced the bulk of the February 2025 attack through THORChain as Lazarus Group converted it to Bitcoin.
What Happens to Bitget Users
Bitget says a $464 million protection fund covers every customer. Withdrawals restart Monday, starting with Bitcoin at 8:00 UTC.
Chen says North Korea was very likely behind it. Bitget is offering a 5% bounty for help freezing the funds.
THORChain has still not blocked the flagged wallets, and despite all manner of slamming for its stance, the network’s RUNE token is up by over 20% in the last 24 hours.
The post THORChain Refuses to Block Assets Tied to Bitget Hackers appeared first on BeInCrypto.
Crypto World
Bitcoin Price Analysis: Key Support Levels and Liquidity Clusters to Watch This Week
Bitcoin is attempting to recover after its latest rejection from the $86K-$87.3K supply area. While the broader structure remains constructive, BTC still needs to reclaim this overhead zone to confirm another leg higher, with liquidity positioned on both sides of the market.
Bitcoin Price Analysis: The Daily Chart
On the daily timeframe, Bitcoin remains in a bullish market structure following the powerful August breakout. The price has since established itself well above both displayed moving averages, which are now turning higher and providing a more supportive medium-term backdrop.
The latest advance carried BTC into the major $86K-$89K resistance region, where sellers stepped in and triggered a correction toward $83K. However, the pullback has so far remained relatively contained, with the price currently recovering around $84.9K.
The $80K-$82K demand zone is the most important nearby support. Holding above this region would preserve the recent higher-low structure and keep another attack on the highs plausible. A successful daily breakout through the $86K-$89K supply zone could then clear the way for further price discovery.
Conversely, losing the $80K-$82K area would weaken the bullish structure and could expose the deeper $75K-$78K demand zone. The rising moving averages remain substantially below current prices, so a deeper correction could still occur without necessarily reversing the broader trend.
BTC/USDT 4-Hour Chart
The 4-hour chart provides a clearer view of the current consolidation. Bitcoin was rejected from a more concentrated supply zone between approximately $86K and $87.3K, subsequently dropping toward the $83.5K-$84K area.
Since then, volatility has contracted considerably. BTC has formed a tight sideways base before beginning to grind higher toward $85K. This stabilization following the sharp rejection is constructive, but the $86K-$87.3K supply zone remains the decisive obstacle.
A clean breakout and sustained move above $87.3K would indicate that the recent correction has likely run its course and could trigger another impulsive move higher. Until then, the price remains below resistance and vulnerable to another rejection.
On the downside, the $80K-$82K demand zone represents the first major support. If that fails, the broader $75K-$78K region becomes the next significant area where buyers could attempt to regain control.
Sentiment Analysis
The one-week Binance BTC/USDT liquidation heatmap shows a notable imbalance in nearby liquidity. The strongest concentration above the current market appears around $87K-$88K, almost perfectly aligning with the technical supply zone identified on the price charts.
This makes the region particularly significant. If BTC pushes through $86K and begins clearing the $87K-$88K liquidity cluster, short liquidations could contribute to an acceleration of the move.
However, considerable downside liquidity also remains visible. There are notable clusters around $82K and, more importantly, close to $80K-$81K. The latter broadly overlaps with the daily demand zone, reinforcing this area as a key downside target if the current recovery fails.
For now, Bitcoin appears caught between the liquidity below $82K and the larger overhead concentration near $87K-$88K. With price gradually recovering toward the upper cluster, a confirmed break through the supply zone could provide the catalyst for another significant upward move.
The post Bitcoin Price Analysis: Key Support Levels and Liquidity Clusters to Watch This Week appeared first on CryptoPotato.
Crypto World
Riot Frees $494 Million in Bitcoin From Coinbase Loan: Will It Sell?
Riot Platforms has repaid a $200 million Coinbase loan, releasing 5,821 bitcoin it had locked up as security. At today’s price of about $84,800, those coins are worth roughly $494 million.
Riot, a Nasdaq-listed Bitcoin (BTC) miner, now controls that stack without restriction. It is also spending heavily to turn its Texas sites into artificial intelligence (AI) data centers.
What Riot’s Bitcoin-Backed Coinbase Loan Repayment Freed
The loan worked much like a pawn deal. Riot handed Bitcoin, USDC (a dollar-pegged digital token), and cash to Coinbase Custody as security.
Riot cleared the debt and interest on September 21, according to an 8-K filed Friday. An 8-K is a report US-listed companies must file after major events. Coinbase’s claim on the pledged assets ended the same day, and Riot paid no early repayment fee.
The released coins made up just over half of the 11,380 Bitcoin Riot held on June 30. However, the filing does not say how Riot raised the cash or what it plans for the coins.
Why Riot’s Locked Bitcoin Kept Changing
Before the payoff, only 5,559 of Riot’s coins were free to use, its June quarterly report shows. If its holdings have not changed since, the payoff roughly doubles that pool.
The number of locked coins rose and fell with Bitcoin’s price. When the price drops, each coin covers less of the debt, so Riot had to hand over more.
That happened in February. A price slide forced Riot to add 1,825 coins, lifting its pledge from 3,977 at the end of 2025 to 5,802, its annual report shows.
The rule also worked the other way. When prices rose, the loan agreement let Riot ask for some coins back without repaying. However, Coinbase had the final say on the math.
Instead, Riot repaid the full $200 million, seven months before the loan’s April 2027 due date. The loan carried a fixed 6.15% interest rate.
Riot Has Been Selling More Bitcoin Than It Mines
Riot’s recent record shows heavy selling. In the first quarter, it sold 3,778 Bitcoin for $289.5 million while mining 1,473, its production update shows.
The drawdown continued. Riot’s holdings fell from 15,680 to 11,380 coins in the second quarter, even as it mined 1,587. BeInCrypto reported in August that the miner was funding its AI buildout partly through those sales.
That buildout is large. In August, Riot signed a 20-year, $9.1 billion lease for 191 megawatts of computing capacity at its Rockdale, Texas, campus. The tenant is described only as a leading frontier AI lab.
Riot has other funding lined up, though. Morgan Stanley provided a $573 million interim loan for early construction, while a longer-term credit backstop is being finalized, Riot’s second-quarter results show.
Meanwhile, Bitcoin’s price has climbed since June 30, when the pledged coins were worth $340.7 million.
On the market, RIOT shares closed Friday at $23, down 2%. The stock lost about 3% over five days but remains up roughly 82% this year.
Riot’s next quarterly report will show whether the freed bitcoin stayed on its books.
The post Riot Frees $494 Million in Bitcoin From Coinbase Loan: Will It Sell? appeared first on BeInCrypto.
Crypto World
VRA faces scrutiny in French crypto fraud investigation
French authorities have placed a woman under formal investigation as they examine whether alleged manipulation of Verasity’s VRA cryptocurrency helped finance tens of millions of euros in Dubai property purchases.
Summary
- French investigators suspect VRA price manipulation helped finance Dubai property purchases linked to Svetlana A.
- Svetlana A. was formally investigated and detained over organized fraud, money laundering and criminal conspiracy.
- Le Monde says she spent over €50 million on roughly 100 Dubai apartments and villas.
- VRA rose about 65-fold during spring 2021 before later collapsing from its speculative price surge.
- Patent records list Svetlana Astakhova and Robert James Mark Hain together on Verasity-related technology inventions.
Le Monde reported on Sept. 25 that Svetlana A., a Russian-born French citizen, was arrested in July in the Alpes-Maritimes and later detained following action by a Paris investigating judge. France’s National Financial Prosecutor’s Office confirmed that she was placed under investigation for alleged organized fraud, aggravated laundering of tax-fraud proceeds and criminal conspiracy.
A judicial source told the newspaper that investigators suspect Svetlana A. and her British partner, identified as Robert H., were involved in alleged organized fraud through manipulation of a cryptocurrency’s exchange rate. Authorities are examining whether proceeds from that activity helped finance her Dubai real estate holdings.
VRA price activity forms part of the French investigation
Le Monde identified the cryptocurrency under examination as Verasity’s VRA token, which launched in 2018.
During spring 2021, VRA’s price increased roughly 65-fold over approximately two and a half months before reversing sharply, according to the newspaper’s investigation.
French investigators have not publicly released transaction-level evidence showing how any alleged price manipulation was conducted. Available judicial reporting does not identify specific trades, wallets, exchanges or counterparties allegedly used in the suspected scheme.
CoinGecko data shows VRA later reached an all-time high of $0.08621 on Oct. 31, 2021. The token now trades far below that record.
The token has experienced sharp price moves outside the period being examined by French investigators. VRA climbed as much as 45% in one session in May 2025 and gained more than 250% from its monthly low during that rally.
The French case concerns suspected conduct tied to earlier VRA activity. Investigators have not connected the later market movements to the alleged scheme described by Le Monde.
Dubai property purchases exceeded €50 million in 2022
Investigators are examining the source of funds behind a large Dubai property portfolio linked to Svetlana A. Le Monde reported that she spent more than €50 million during 2022 alone. The purchases covered around 100 apartments and three luxury villas throughout Dubai.
Many of the properties were rented, producing at least €4 million in cumulative income between 2022 and 2025, according to the newspaper’s investigation.
The holdings were spread among roughly 15 buildings, including Burj Royale, Opera Grand, I-Rise Tower and MBL Royal. In several buildings, she owned as many as ten units.
One transaction involved an entire residential building. In June 2022, Svetlana A. paid 68 million dirhams, then worth approximately €17.4 million, for Amara Residences. The five-story property contained 73 apartments and commercial spaces.
Ownership records later changed. Le Monde reported that the building was transferred without payment in February 2024 to Abu Dhabi company Sempios Holdings, which was held through a private foundation.
The newspaper said checks of UAE corporate registers still showed Svetlana A. holding signing authority connected with the company that owned the assets.
Dubai has become a major center for digital-asset businesses and financial services. In separate coverage, crypto.news reported on a UAE-Sweden investigation involving an alleged $7.1 million international crypto laundering network. No public evidence links that separate investigation to Svetlana A., Robert H. or Verasity.
Patent records connect the pair to Verasity technology
Public patent records provide documented links between Svetlana Astakhova and Verasity-related technology.
A U.S. patent record for a rewarded video-viewing system names Robert James Mark Hain and Svetlana Astakhova as inventors and lists Verasity Limited as the assignee.
Another Verasity patent identifies Robert James Mark Hain as inventor of technology connected with the company’s Proof of View system.
Verasity’s own materials identify RJ Mark as its founder. Its company information page says RJ Mark remains the company’s sole founder after stepping away from the public-facing CEO role.
Le Monde refers to Svetlana A.’s partner as Robert H. and says he used their research to launch Verasity in 2018. Public patent records identify Robert James Mark Hain in connection with Verasity’s technology.
UK corporate filings provide another documented link. Companies House records show Svetlana Astakhova ceased being a person with significant control of Veraviews Limited on July 5, 2023, when Verasity Limited S.R.L. became the controlling entity.
Le Monde separately reported that she had previously been the sole shareholder of Veraviews Limited before the shares were transferred to Verasity Limited S.R.L.
VeraViews remains part of the Verasity ecosystem and provides advertising technology using Proof of View. Crypto.news reported in earlier coverage that VeraViews partnered with Alkimi Exchange to integrate fraud-detection and verified-audience technology.
Svetlana A. denies wrongdoing and property link
The allegations remain under judicial investigation, and no conviction has been reported. Under French procedure, a “mise en examen” is a formal judicial status used when an investigating judge finds serious or consistent indications that justify investigating a person’s possible involvement in an offense.
France’s official justice portal states that being placed under formal investigation does not amount to a finding of guilt. The case can later be dismissed or referred for trial depending on the evidence gathered.
Her former lawyer, Olivier Bluche, told Le Monde in April 2025 there was “no link” between her property assets and Verasity’s activities. He said she held no VRA tokens, had given up patent rights and had never held a position within the Verasity group.
Le Monde said its own review of corporate records subsequently found links involving Veraviews Limited and companies associated with Verasity. The newspaper reported that three law firms acting for Verasity later sent formal notices concerning the confidential nature of documents obtained from Abu Dhabi corporate records.
The Sept. 25 report said Svetlana A.’s new lawyers did not immediately respond to requests for comment.
The National Financial Prosecutor’s Office investigation has been assigned to France’s National Brigade for the Repression of Tax Fraud. Investigators are examining allegations covering organized fraud, aggravated money laundering linked to tax fraud and criminal conspiracy.
Crypto World
Vitalik Buterin says Ethereum is becoming a cryptographic world computer
Ethereum has begun moving toward what Vitalik Buterin calls a “cryptographic world computer,” with major changes planned to verification, consensus, privacy and state management after Hegotá.
Summary
- Ethereum could evolve into a cryptographic world computer using proofs, privacy tools and decentralized components.
- Hegotá may become Ethereum’s last conventional fork before recursive STARKs and Lean consensus reshape upgrades.
- FOCIL is scheduled for Hegotá to strengthen censorship resistance by distributing transaction inclusion authority further.
- PeerDAS has already changed Ethereum verification by letting nodes sample data instead of downloading everything.
- Ethereum Foundation targets quantum-resistant execution, consensus and data layers by December 2029 under current plans.
Buterin wrote in his Sept. 27 essay, The Cryptographic World Computer, that Ethereum is approaching a point where describing it simply as a blockchain becomes increasingly incomplete.
He expects future Ethereum architecture to combine blockchain consensus with zero-knowledge proofs, data sampling, privacy technology and decentralized off-chain computation.
“Hegota — the fork planned for next year — is likely to be Ethereum’s last ‘normal’ fork,” Buterin wrote, referring to an upgrade whose technology would remain recognizable to developers familiar with Ethereum in 2015.
Hegotá could close Ethereum’s conventional upgrade era
Ethereum’s official roadmap currently places Hegotá in 2027, following Glamsterdam in the fourth quarter of 2026.
The Hegotá upgrade remains in planning, and its complete scope has not been finalized. Two proposals are already scheduled.
FOCIL, or EIP-7805, is the consensus-layer headliner. It lets a committee of validators create inclusion lists containing transactions that block builders must include.
The mechanism is designed to reduce the ability of a single builder to exclude valid transactions. Ethereum’s Hegotá roadmap says the feature can strengthen censorship resistance and improve Layer 2 settlement guarantees.
Frame Transactions, or EIP-8141, is the second scheduled feature. It lets Ethereum accounts decide how their transactions are authorized instead of requiring the same fixed signature structure for every user.
The design can support social recovery, spending controls, sponsored gas and future quantum-resistant signature systems directly at the protocol level.
Ethereum developers have begun treating Hegotá as part of a longer sequence leading toward post-quantum infrastructure and redesigned consensus.
Buterin’s latest essay goes further by describing Hegotá as a dividing line between Ethereum’s existing architecture and the cryptographic systems expected to follow.
Ethereum verification could move toward proofs and sampling
One of the largest changes concerns how network participants verify blocks. Traditional blockchain verification requires nodes to download blockchain data and execute transactions themselves. Buterin expects Ethereum to rely increasingly on SNARK verification and PeerDAS data sampling. His comparison of blockchain designs describes the transition as moving from “full re-download and recompute” toward “SNARK verification + PeerDAS for data availability.”
PeerDAS has already entered Ethereum through Fusaka. The system lets nodes verify data availability by sampling parts of the dataset instead of requiring each node to download every blob. The Ethereum Foundation has since moved its development focus toward the next stages of proof-based verification. As crypto.news previously reported on Ethereum’s Lean rebuild, recursive STARKs sit at the center of plans to reduce repeated execution while keeping verification trustless.
Buterin describes the eventual verification model more simply as a move from “download and re-execute” toward sampling data and verifying cryptographic proofs. The approach could reduce the hardware requirements for users seeking strong verification guarantees. His 2030 comparison says nodes should still obtain consensus and validity guarantees while storing less history and performing less redundant computation.
EIP-8288 could aggregate signatures inside the mempool
Buterin specifically mentioned EIP-8288 among the technologies that could change how Ethereum processes transactions before they enter blocks.
EIP-8288 is currently a draft proposal authored by Buterin and Thomas Coratger. It introduces in-mempool aggregation for cryptographic signatures and STARK proofs. The design extends Frame Transactions and lets transactions declare cryptographic dependencies.
Mempool nodes could combine many signatures and proofs into a single recursive STARK before passing them onward to block builders. The builder could then include an aggregated proof instead of processing every large proof independently. The proposal is designed partly around future quantum-resistant signatures, which can require considerably more data and computation than Ethereum’s current signature system.
EIP-8288 proposes aggregating LeanSPHINCS signatures and LeanSTARK proofs so that these larger cryptographic objects do not create the same level of bandwidth and gas overhead when used at scale. The EIP remains in draft status and has not been assigned to a confirmed network upgrade.
Buterin’s essay presents it as part of a longer technical direction where cryptographic work can happen earlier in the transaction pipeline, including inside the mempool. His 2030 model envisions signatures and proofs being processed in parallel before final block inclusion.
FOCIL and private mempools could change transaction inclusion
Ethereum’s future transaction journey could look very different from the familiar sequence of user, mempool, miner and block. Buterin describes a model where transactions enter a mempool with stronger privacy properties before moving through FOCIL participants or builders.
The Ethereum Foundation’s security roadmap confirms that research into encrypted mempools remains active alongside FOCIL development. FOCIL is already scheduled for Hegotá.
Under the proposal, multiple validators can submit lists of transactions that should appear in a block. A builder cannot independently ignore eligible transactions appearing on those lists without violating protocol rules. Buterin expects network privacy to develop in parallel.
His 2030 comparison includes onion routing, mixnets and other network privacy methods alongside zero-knowledge proofs for transaction and account privacy. As crypto.news reported in August, Buterin has moved privacy and quantum security higher in Ethereum’s roadmap as cryptographic tools mature.
Lean consensus targets faster and simpler finality
Consensus itself is expected to change. Ethereum currently uses proof-of-stake with finality occurring over several epochs. Researchers are working toward a more streamlined consensus model capable of reaching finality much faster.
Ethereum’s security roadmap says research that began around single-slot finality later developed into three-slot finality and is now progressing through Minimmit, a one-round consensus design under the Lean Ethereum program.
Finality measured in seconds remains a long-range research target around 2029, but no specific upgrade has yet been assigned to deploy the final design. Buterin’s 2030 comparison estimates slots of roughly four to eight seconds and finality around eight to 32 seconds. The current Ethereum roadmap cautions that these plans remain research goals and may change.
Crypto.news described the Lean Ethereum program in July as the network’s largest technical overhaul since The Merge, with new consensus, proof systems, storage and privacy mechanisms planned over several years.
Ethereum targets quantum resistance by December 2029
Quantum security has become one of Ethereum’s most clearly dated long-term targets. The Ethereum Foundation Protocol Cluster said on Sept. 7 that it is targeting quantum resistance across the execution, consensus and data layers by December 2029.
The Foundation describes the date as deliberately aggressive. Its planning assumes that cryptographically relevant quantum machines could appear as early as 2030, while acknowledging most estimates put that possibility later.
Ethereum is working on replacing cryptography vulnerable to sufficiently powerful quantum computers. Areas under review include BLS validator signatures, ECDSA account signatures, KZG commitments used in data availability and some zero-knowledge proof systems.
Frame Transactions could help with the account side by allowing wallets to choose quantum-resistant verification methods without requiring every account to migrate through the same protocol-level mechanism. EIP-8288 could reduce the cost of aggregating some of those larger post-quantum signatures.
As crypto.news reported in its quantum roadmap analysis, recursive STARK aggregation and hash-based signatures form part of Ethereum’s proposed defense against future quantum attacks. Buterin expects recursive STARKs, formal verification and quantum-resistant cryptography to become increasingly central after Hegotá.
Ethereum could rely more on decentralized off-chain components
Buterin’s “world computer” description does not mean Ethereum would move everything onto Layer 1. His essay instead describes an architecture where the blockchain focuses on data and state changes that require ordering, while other work happens in parallel outside the main execution path. “Structuring computation lets the blockchain more effectively focus on its job,” he wrote.
Under that model, signatures and proofs could be aggregated before entering a block, historical data could be distributed between participants and specialized computation could happen outside the base execution layer.
The network would then verify the output cryptographically. Buterin argues that modern proof systems allow Ethereum to distribute computation without requiring every participant to trust whoever performed each piece of work. His longer-term architecture includes distributed history and state storage, proof-based verification, parallel computation and decentralized systems sitting between users and Ethereum itself.
A more speculative technology appears further out. Buterin said indistinguishability obfuscation, or iO, could eventually allow generalized encrypted computation involving many asynchronous participants. He described it as a possible later development, not a technology required for the architecture outlined in his post.
Ethereum’s next scheduled milestone remains Glamsterdam, with Hegotá planned to follow in 2027. Crypto.news reported on Glamsterdam testing risks as developers prepared the upgrade for its next test phases.
Hegotá’s scheduled features currently include FOCIL and Frame Transactions, while additional proposals continue through Ethereum’s research, testing and governance process.
-
Fashion2 days agoWeekend Open Thread: J.McLaughlin – Corporette.com
-
Crypto World5 days agoGoldman Sachs and Deutsche Bank Agree: The S&P 500 Rally Isn't Over
-
Tech7 days agoResearchers escape OpenAI Codex sandbox to run commands on host
-
Fashion3 days ago8 iPhone Accessories That Add Personality
-
Crypto World7 days agoWho Needs CLARITY Anyway? ARB Could See 70X Increase: Hodler’s Digest
-
Entertainment5 days agoThese 17 Fall Amazon Dresses Seriously Look Like Anthropologie
-
Business7 days agoAnalog Devices (ADI) Bets $1.35 Billion on Chips that Let Machines Think for Themselves
-
Crypto World7 days agoCoinbase, Robinhood, Circle Seen as Tokenized-Stock Winners
-
Crypto World5 days agoThis Bearish Netflix Stock Trade Can Cash In On Video Streaming Giant’s Woes
-
Tech5 days agoReolink’s solar 4K security camera falls to its lowest price in months
-
Crypto World5 days agoTrump-Xi Polymarket Odds for Handshake Hit 50%
-
Tech6 days agoGoogle’s $899 Googlebook is a bet that you’ll buy a new laptop for Gemini
-
Crypto World4 days agoCrude Oil Prices Pressured by Diplomatic Hopes in the Middle East
-
Business5 days agoOil Price Today (September 23): Crude oil below $100 on hopes of US-Iran talks. What did Trump say?
-
Crypto World4 days agoBitcoin price tests $83,600 Supertrend support after $87K rejection
-
Crypto World4 days agoBitcoin Threatens Sub-$84,000 Breakdown as Long Liquidations Spike
-
Crypto World6 days agoMeta Jumps 11% As Muse Shines and Investors Show an Appetite for Advancing AI
-
Crypto World5 days agoDid Jim Cramer Just Give GameStop Stock the Kiss of Death When He Said the Turnaround Is Working?
-
Crypto World6 days agoBitcoin price holds above $81K as key catalysts line up
-
Crypto World5 days agoBitGo says Bitcoin absorbed Fed hike, CLARITY failure

ChartNerd
(@ChartNerdTA)
, (@BullNakedCrypto) 


You must be logged in to post a comment Login