Cross-chain protocol THORChain generated $3.01 million in system income during September—its highest monthly total since March 2025—driven largely by a concentrated five-day trading surge linked to the $387.5 million Bitget exploit.
Bitget Exploit Drives 63% of Monthly Income
Between Sept. 25 and Sept. 29, roughly $1.37 billion in swap volume crossed the protocol, representing 57% of September's total $2.40 billion volume. During this five-day window, daily trading ranged between $190 million and $460 million, generating $1.9 million in protocol income—equivalent to 63% of the monthly sum.
The surge coincided with asset movements from attacker-controlled addresses following the security breach at exchange platform Bitget. Despite calls to block the illicit transfers, THORChain defended its permissionless architecture, comparing its neutral operations to Bitcoin, Ethereum, and BNB Chain. The protocol noted that emergency network halts exist to preserve system security rather than censor individual addresses, citing a May incident where exploiters stole $10.7 million from liquidity pools without being blacklisted from subsequent swaps.
Volume Outpaces User Growth Across Network
The income surge dramatically outpaced underlying account growth. Active wallets increased modestly to 25,000 in September from 23,500 in August, while new wallets rose to 22,400 from 21,800. Compared to August's $615,000 income and $613 million swap volume, September metrics jumped nearly fivefold and fourfold respectively, confirming that large individual transfers drove the statistical expansion.
The activity spike temporarily inflated annualized returns across the network. On Sept. 29, seven-day annualized yields hit 69.03% for RUNE and 29.74% for TCY. Frontend affiliates earned $840,700 in September fees, with roughly $669,000 distributed to unidentified affiliate accounts.
Key Takeaways
- THORChain recorded $3.01 million in September income on $2.40 billion in swap volume.
- Hack-linked trading between Sept. 25–29 accounted for $1.37 billion in volume and $1.9 million in revenue.
- Active monthly wallets grew slightly from 23,500 to 25,000, confirming large transfers drove the fee surge.
- RUNE seven-day annualized yield peaked at 69.03% on Sept. 29.
Why It Matters
THORChain's record revenue highlights the financial dynamics of permissionless liquidity networks during security crises. While the protocol demonstrated high throughput and decentralized resistance to external transaction filtering, relying on sporadic hack-related volume creates temporary revenue spikes that rapidly fade as high-fee days roll out of yield metrics. For long-term sustainability, THORChain must convert current visibility into consistent volume from regular retail and institutional integrators.
