high-tech laundromat where stolen cash gets spun clean, slipping past the cops. That’s what happened on May 22, 2025, when hackers funneled 17,778.7 Ethereum (ETH), worth $44.94 million, through THORChain, a DeFi platform, swapping it for DAI, a stablecoin, per The Merkle. Likely linked to a Coinbase heist, this wasn’t a flaw in THORChain’s code but a clever dodge to hide dirty crypto, per @spotonchain. With $2.2 billion in crypto stolen in 2024, per Chainalysis, this saga grips anyone curious about DeFi’s wild side. Let’s unpack it like we’re piecing together a heist movie, no blockchain degree needed.
What Happened in the THORChain Hack?
In a two-hour blitz, hackers moved 17,778.7 ETH through THORChain, a DeFi bridge connecting blockchains like Ethereum and Bitcoin, per blockchain.news. They swapped it for $44.94 million in DAI at $2,528 per ETH, per @spotonchain. The ETH, possibly from a Coinbase breach hitting 69,461 users, was split into batches—8,698 ETH for $22.1 million DAI and 9,080.7 ETH for $22.82 million DAI, per The Merkle. This wasn’t a hack of THORChain’s system but a laundering scheme, like sneaking stolen goods through a pawn shop.

For newbies, THORChain’s like a cosmic highway letting crypto zip across chains anonymously. Hackers used this to “clean” their ETH, making it DAI, which is tougher to trace, per PANews.
Key Hack Details
- Amount: 17,778.7 ETH, swapped for $44.94M DAI, per @spotonchain.
- Platform: THORChain, handling $4.6B weekly volume, per bitcoinethereumnews.com.
- Date: May 22, 2025, 12:30–14:30 UTC, per blockchain.news.
How Did Hackers Pull It Off?
No fancy code-cracking here—just smart maneuvering. The hackers, possibly tied to a $300M Coinbase hack, sent ETH to THORChain’s pools, swapping it for DAI via three new wallets, per @lookonchain. THORChain’s no-KYC, cross-chain swaps let them stay anonymous, per The Merkle. One wallet oddly bought back 207.17 ETH with $536K DAI, hinting at market plays or errors, per @OnchainLens. It’s like swapping stolen gold for cash at a shady market, then buying a bit of gold back.
Why THORChain?
THORChain’s design—swapping assets across chains without centralized checks—makes it a hacker haven, per CoinDesk. Unlike its 2021 hacks ($5M-$8M losses from code flaws, per Cointelegraph), this wasn’t an exploit but a deliberate use of its anonymity, per @Doghablaespanol. Its $8.3B yearly swaps fuel DeFi but draw crooks, per CryptoPotato.

Why Wasn’t THORChain Hacked Directly?
Unlike 2021, when THORChain lost $7.6M-$8M to code bugs, this wasn’t a protocol breach, per cryptopotato.com. Hackers used THORChain as a tool, not a target, exploiting its open design, per blockchain.news. X post @1984_is_today notes THORChain’s 2025 insolvency fears, but this incident didn’t drain its pools—users and liquidity providers weren’t hit, per @THORChain.
Past THORChain Hacks
- July 2021: $7.6M stolen via ETH router bug, per cointelegraph.com.
- June 2021: $140K lost in Chaosnet launch, per beincrypto.com.
What’s the Risk of DeFi Laundering?
DeFi’s freedom—no banks, no IDs—cuts both ways. Hackers laundered $68.72M total via THORChain, per @spotonchain, part of $1.4B in 2024 DeFi hacks, per halborn.com. THORChain’s anonymity, like Bybit’s $1.4B heist, per @lookonchain, fuels crime. Scams hit 5% of DeFi users, costing $15M yearly, per @PeckShieldAlert. Regulatory gaps, with 50% of countries eyeing crypto laws, add risk, per The Block.
Bigger Picture
Crypto hacks aren’t new—$2.2B was stolen in 2024, per Chainalysis. THORChain’s role mirrors Tornado Cash, sanctioned for laundering, per blockchain.news. X post @OnchainLens warns of “coordinated groups” using DeFi’s privacy, slowing recovery efforts.
How to Stay Safe in DeFi
DeFi’s thrilling but tricky. Here’s how to dodge trouble in May 2025, per CoinGecko and @spotonchain.
1. Use Trusted Platforms
Stick to audited exchanges like Uniswap or Hyperliquid, not just THORChain, per The Merkle. Check for audits—THORChain’s 2021 fixes cut losses, per cryptoslate.com.
2. Secure Your Wallet
Store crypto in a hardware wallet like Ledger ($79), not hot wallets, per WIRED. Enable 2FA and check transactions weekly, as 8% of DeFi users face phishing, per @PeckShieldAlert.

3. Stay Alert
Follow @spotonchain for hack alerts and @THORChain for updates. Join THORChain’s 20,000-member Telegram for news, per CoinDesk. Monitor wallets on Etherscan, as @etherscan flagged the hacker’s address, per bitrss.com.
Can THORChain Bounce Back?
THORChain’s $4.6B weekly volume and $8.3B yearly swaps show strength, per bitcoinethereumnews.com. It survived 2021 hacks by patching code and paying bounties, per cointelegraph.com. This incident didn’t hurt users, but X post @1984_is_today flags insolvency risks if big redemptions hit. A 2025 HyperEVM launch could add 100,000 users, per CryptoPotato, but regulators may tighten rules, per The Block.
Your Move in DeFi’s Wild West
The $44.94M ETH-to-DAI swap, tied to a Coinbase hack and laundered via THORChain, per @spotonchain, shows DeFi’s double-edged sword. Start small—buy $10 ETH on Hyperliquid, store it in a Ledger, and track @lookonchain for whale moves. With $1.4B in 2024 DeFi losses, per halborn.com, stay cautious. THORChain’s anonymity draws hackers, but its cross-chain swaps fuel innovation. Dive in, but keep your eyes open!
