GoPlus Security Questions THORChain's Decentralization Amid DPRK-Linked Fund Transfers

GoPlus Security has raised concerns regarding THORChain's claims of decentralization, particularly in light of recent events involving funds linked to North Korea. The blockchain security firm highlighted that THORChain's validator-controlled vaults grant active validators the ability to block transactions, a power not held by Bitcoin or Ethereum, where users maintain control over their private keys. This critique follows a significant hack of the Bitget exchange, which resulted in losses of approximately $387.5 million, with stolen assets reportedly funneled through THORChain's infrastructure.

On September 26, GoPlus pointed out that during the Bitget incident, around 101.5 BTC, valued at about $8.5 million, and approximately 27.63 million XRP worth around $43 million were processed through THORChain. The firm noted that these transactions were likely linked to North Korean activities, raising questions about the protocol's ability to manage illicit fund flows effectively. THORChain operates as a cross-chain liquidity protocol, utilizing a native token called RUNE and a network of about 100 validators to facilitate asset swaps across different blockchains without centralized intermediaries.

Critics, including OKX founder Star Xu, have echoed GoPlus's concerns, emphasizing the risks associated with the collective control of transactions by validators. THORChain's governance system, which includes a mechanism called Mimir that allows for emergency halts, further complicates its decentralization narrative. GoPlus argues that this structure contradicts the principles of permissionless networks, as it enables a group of validators to collectively decide on transaction approvals, unlike the individual key custody seen in Bitcoin and Ethereum.

The implications of this debate are significant as regulatory bodies increasingly scrutinize blockchain protocols based on their operational architecture. A system where validators can halt transactions resembles a financial intermediary more than a decentralized blockchain, challenging THORChain's positioning in the evolving landscape of cryptocurrency regulations.

© 2026 KLEA News. All Rights Reserved. This article is provided for informational purposes only. It is not offered or intended to be used as legal, tax, investment, financial, or other advice.

Source: KLEA News