After Bitget got hacked on Sept. 24, $387.5 million of stolen funds quickly began moving across chains, with some headed to decentralized cross chain swaps platform THORChain.
Chief executive Gracy Chen publicly appealed to the platform to refuse service to attacker-linked addresses. “The industry is watching,” she said.
Yet THORChain refused. And that refusal has kicked off a furious debate between those who believe protocols have a moral obligation to block stolen funds, and those hold the cypherpunk ideals of decentralized, permissionless technology sacrosanct.
Having previously watched on as the Bybit hackers funneled $1.2 billion through the protocol, it’s pretty clear which side of the argument THORChain is on. Developer Boone Wheeler tells Magazine:
“A truly permissionless protocol can do nothing when it encounters known stolen funds — it is blind to their provenance. If THORChain were able to block specific stolen funds, it would not be permissionless.”
Where does permissionlessness end?
Critics argue that THORChain wasn’t quite so idealistic when validators voted to halt the chain in May after an automated system triggered when an attacker exploited a vulnerability and drained over $10 million from one of its vaults.
Bitget CEO argues THORChain should refuse services. Source: Gracy Chen
NEAR Intents, which is a cross-chain transaction competitor of THORChain, took the opposite approach and intervened to block hack-linked funds. Its automated security layer SHIELD identified more than $50 million in attempted flows linked to the Bitget incident and stopped $503,000 during execution. It said $166,000 passed through.
Related: THORChain under fire over Bitget, ETH evolves beyond blockchain: Hodler’s Digest
NEAR also waived its share of Bitget’s recovery bounty. General manager Alex Shevchenko tells Magazine, “NEAR Protocol is permissionless: anyone can build on it, transact on it, and become a validator…
“No one needs permission to hold or transfer assets or deploy contracts on NEAR Protocol. However, that does not mean every application built on NEAR must process every request.”
NEAR Intents has since come under heavy fire for intervening, with critics arguing it demonstrates it is not permissionless or decentralized. This may expose it to claims it should exercise that control more broadly. However, because SHIELD is an automated system, crypto lawyer Yuriy Brisov believes it could still fall within the protections afforded to decentralized protocols.
“There is no compliance team, people who sit there and control the operation manually. This is a smart solution, and that’s what we recommend to all the DeFi companies.”
Source: Omid Malekan
Permissionless does not necessarily mean neutral
Biget’s Chen tells Magazine that while she understands different protocols have “different architectures, governance models and technical capabilities,” there is an important distinction between permissionless infrastructure and “facilitating the movement of known stolen funds.”
She points to NEAR Intents’ actions and says, “We appreciate that response and will follow the appropriate legal and recovery process for those assets.”
Bitget wants to understand “what is technically and governance-wise possible when stolen assets are identified,” Chen says, and whether the industry can find workable approaches together:
“Permissionless infrastructure does not necessarily mean there can be no mechanisms for detecting and responding to known illicit flows.”
Complicating THORChain’s argument, it has shown it can intervene in an emergency if it chooses to.
THORChain’s post-mortem of the May exploit said the protocol automatically halts activity when its solvency checks detect an insolvency event, and node operators can then use broader emergency controls to pause trading, signing and other network activity.
Related: SlowMist traces Bitget hack activity to Aug. 31 zero-day exploit
Wheeler says there is “firm consensus” among THORChain’s nodes around the ideal of being permissionless, and that “halts are only used when there is an active issue or problem with the protocol.”
Moreover, he says there is “no functionality to screen individual addresses or transactions.” This is a design choice, as the system was “intentionally designed to be truly permissionless.”
THORChain halted its chain in May over a security incident. Source: THORChain
NEAR Intents provides a contrasting model
While THORChain is located at the shadowy super-coder end of the spectrum, the NEAR team occupies the middle ground. NEAR has a new ETF from Bitwise and has a different philosophy and approach.
Shevchenko says NEAR Intents was designed to enable open participation but has its own financial integrity measures, and SHIELD is built to “automatically apply targeted controls to supported flows.”
In this incident, he says SHIELD used public onchain data and signals from an internal anti-money…
cointelegraph.com