Protos: THORChain processed ~$678M in two days after Bitget as refuse-service fight holds

By Crypto Wire
September 28, 2026

The refuse-service fight now has a volume receipt. Protos, timestamped about 1:08 p.m. September 28, says THORChain’s own analytics show the protocol processed about $678 million across the two days after the Bitget breach—against roughly $20 million to $60 million in daily volume the week before—and booked almost $1.2 million in “gross system income” over that same two-day window. This UPDATE links ZachXBT’s public-chat launderer beat (9969) rather than silent-editing that URL.

What Protos counted. The outlet reads THORChain’s public analytics page for a post-hack surge: $678 million processed in the two days following Bitget’s Thursday loss, versus a $20–$60 million daily band in the prior week. Gross system income for those two days is framed at nearly $1.2 million—protocol tape as relayed by Protos, not a desk re-sum of Midgard fills. That spike lands while Bitget CEO Gracy Chen and tracing partner SlowMist both pressed the project to refuse tracked attacker addresses, and while Monday’s CoinDesk tally put about 2,390 ETH (~$6.3 million) into 75.2 BTC via 27 successful THORChain swaps from a Lookonchain-linked wallet.

Why the hypocrisy frame matters for collectors. Protos notes THORChain validators halted trading after the protocol’s own roughly $10 million May exploit, then stresses the project’s later line that a halt protects the protocol and is not a selective blacklist—language already on the desk after Chen’s refuse-service ask. The new print is the volume/income jump sitting beside that stance: permissionless rails kept processing cross-chain swaps at a multiple of the prior week’s daily pace while stolen Bitget-linked flow remained in the narrative. Protos also flags that BNB Chain validators did halt after a large 2022 theft, undercutting a clean “base layers never halt” comparison in THORChain’s September 26 reply. Separately, the outlet recalls THORChain’s long use in post-hack peels—including large Bybit and Kelp DAO-linked flow—without treating those histories as today’s two-day total.

---

---

How this ties to the human ops layer. 9969 carried ZachXBT’s claim that Chinese illicit actors troubleshooting Bitget-trail swaps were posting in public Discord and Telegram support channels—including THORChain-linked venues—with five named aliases and a Kelp DAO overlap on one handle. Volume does not prove every dollar of the $678 million two-day print is Bitget loot; do not invent that. It does show THORChain’s rails were unusually busy in the same window Bitget-linked ETH→BTC and XRP→BTC chatter dominated the trail. Protos’s SlowMist note—that the firm urged decentralization not become a “blanket excuse” for known stolen funds—adds a second named voice beside Chen without changing THORChain’s published permissionless reply. Stick to Protos’s analytics read, the prior-week daily band, the ~$1.2 million gross system income figure, SlowMist’s refuse-service appeal alongside Chen, and the already-published Monday swap tally.

What not to invent: that THORChain blacklisted Bitget attacker addresses after the Protos piece; that retail BTC withdrawals failed because of the volume spike; that the desk independently re-audited THORChain’s analytics dashboard; or that Bybit/Kelp historical THORChain use equals today’s two-day $678 million bucket. Attribute the $678 million / $1.2 million figures to Protos’s read of THORChain’s analytics, not to a desk export. ETH reopen for Bitget retail still sits on September 29 on the hack-and-withdrawals tracker. Sibling reopen LNs (9902, 9908, 9916) remain operational rails, not protocol-volume math.

Bottom line: Protos’s Monday read of THORChain analytics puts about $678 million through the protocol in the two days after Bitget—and nearly $1.2 million in gross system income—while refuse-service pressure and ZachXBT’s Discord beat stay live—Rug Room UPDATE after 9969.

Disclaimer: This article is provided for informational and educational purposes only. It does not constitute financial, investment, legal, or trading advice. The NFT market is highly volatile, and past performance is not indicative of future results. Readers should conduct their own research and consult qualified professionals before making any decisions related to digital assets. The cover image for this article may have been created using artificial intelligence (AI).