Pinned Tweet
Seeing a lot of chat about how the Bitget hack funds are being moved, so I wanted to share how it looks from our side at @chainflip.
@MistTrack_io picked up that the exploiter tried to push funds through Chainflip and got rejected at the broker. Nothing was frozen. The deposit just got sent back to the refund address. That's how our screening works: every swap gets checked in real time, and if something is flagged, it doesn't go through and gets returned to the sender.
I want to be honest, though; this is one example of the system doing its job. It doesn't mean we've stopped everything, and I'm not going to pretend we have. I think anyone that has claimed that is not reading the flows correctly. These funds are touching almost every major DEX. It's an ongoing battle, and it will continue to be so until everything has moved.
What makes this one particularly hard is how the funds are moving. The hackers are routing through several hops first to obfuscate where the funds came from. By the time they come out the other side, they often don't get flagged as dirty along the way, even though they obviously are.
Chainflip tends to sit at the end of that chain of steps as they are moving to Bitcoin, so for us it's the point where things really have to be tight. If we miss it, there often isn't another checkpoint after us.
@evilcos made a point I completely agree with. The laundering is automated. Funds get split up and bridged across chains, and the second one rejects them; they move on to the next one. AML and KYT tools are still catching up to that speed. So for us it's about being fast and constantly adjusting as the methods change.
This is where I have to signal out @SEAL_Org and @zeroshadow_io. The live tracking they do is honestly some of the most up-to-date I've seen in the data sources we use, and they put a lot of effort into getting protocols, exchanges, and issuers to work together and help where they can. We couldn't keep up without people like them.
On the bigger debate, some have gone down the route of freezing funds; others don't screen at all. We've tried to land somewhere in between: we don't want stolen funds using Chainflip at all, but we also don't want to be taking custody and freezing.
Someone put the argument against freezing well: "My cash dollar has literally no opinion if I hand it over to buy coffee or drugs; that's the whole point." Once a protocol starts making decisions about whose funds to hold, it's hard for it to be seen as neutral. I think there's something to that, and it's part of why refunding feels like the right approach for us.
That said, I'm really not trying to call anyone out. Whatever approach someone takes, as long as there's a genuine effort to stop these flows, I respect it.
We've been here before too. @Bybit_Official, @KelpDAO , and a bunch of other big incidents all taught everyone something, and each time the response has gotten a bit better. This one will be no different.
If anyone wants to chat more about screening or how we handle this stuff, my DMs are open.
MistTrack: Bitget Exploiter Attempted to Route Stolen Funds via Chainflip but Broker Rejected
According to on-chain monitoring by SlowMist's tracking arm MistTrack, the Bitget exploiter attempted to move stolen funds through the cross-chain liquidity protocol Chainflip, but the transaction was rejected at the broker interface ("deposit rejected by the broker"). The protocol did not freeze the capital but instead refunded the deposit directly back to the sender, effectively preventing the attacker from routing the exploit proceeds through the network.
Bear 89, aka Backpack, just won Fat Bear Week. Turns out hefty runs in the family.
The other @Backpack has been on a tear too.
Savcat retweeted
Chainflip is heading to @token2049
Find @SavcatEth and @PeterSmeds from October 4 to 8.
If you're building in cross-chain, running a wallet or aggregator, or just want to say hi, get in touch.
Savcat retweeted
Going to be pretty cool with Chainflip 2.1 when you can stake ethereum:0x826180541412d574cf1336d22c0c0a287822678a AND earn 50% APY directly to your bitcoin:native self custody wallet
soon
Been sitting on this one for a while.
A big upgrade is coming to Chainflip in the next few months: one app for everything, staking that pays the people who back the network, and a proper home for operators.
Here's a first look!
Savcat retweeted
4 BTC → 299.79K USDC (ETH) in 13 minutes via Boost (vs 33 min native).
Settled via @Chainflip.
scan.chainflip.io/swaps/1815…
Swaps and quoting are back online now with the exception of TRON.
Thanks everyone for the support in getting this sorted
On Saturday, an attacker exploited a bug in how Chainflip reads Tron memos and took 736,442 USDT from our Tron vault.
That bug is now patched. Here's what happened and the steps we're taking to bring the protocol back online: chainflip.io/blog/getting-ch…
Ok here we go, lets bring the network back online.
On Saturday, an attacker exploited a bug in how Chainflip reads Tron memos and took 736,442 USDT from our Tron vault.
That bug is now patched. Here's what happened and the steps we're taking to bring the protocol back online: chainflip.io/blog/getting-ch…
Rough weekend, but I believe we can get everything back on track quickly. Lots of learnings.
Appreciate all the kind words that have come through over the course of the weekend in show of support.
An update on yesterday's exploit affecting Tron USDT.
736,442.17 USDT was taken. All other funds are unaffected and secure, and impacted users will be made whole.
The network stays paused while we finalise the fix and the restart plan.
Full update: chainflip.io/blog/tron-usdt-…
. @trondao USDT is now live on Chainflip Lending!
You can now supply trxUSDT and/or borrow against it directly through the app.
Really excited to show you all the upcoming unified app experience in the coming months
USDT on TRON just joined Chainflip Lending.
Supply it to earn, or borrow it against your BTC.
chainflip.io/blog/usdt-tron-…
What was your (🫵) biggest swap in your Tangem wallet?
3 BTC → 231.37K USDT (ETH) at -0.10% vs market.
Settled in 11 minutes via @Tangem.
scan.chainflip.io/swaps/1801…
Every month still feels like an opportunity to grow even further.
We are proud of what we have done and looking forward to the rest of it.
Thank you to everyone who has stuck around with us. Now back to work, we have some network upgrades to ship.
August delivered one of the best months for Chainflip all year, with swapping back up in full force.
Here is how the whole thing went. chainflip.io/blog/august-was…
Savcat retweeted
WE GOT A MODAHFUKEN GIGASWAP!! @Chainflip
$2.76M cross-chain in 42 minutes via Boost (vs 62 min native).
34.93 BTC → 26507.5 SOL via @Chainflip.
Settled -0.44% vs market.
scan.chainflip.io/swaps/1759…
Savcat retweeted
Nice looking yields on @chainflip lending for anyone looking to deploy some bitcoin:native ethereum:0xa0b86991c6218b36c1d19d4a2e9eb0ce3606eb48 or solana:Es9vMFrzaCERmJfrF4H2FYD4KCoNkY11McCe8BenwNYB
scan.chainflip.io/lending/ma…
Really good to see these swaps back
3.04 BTC → 238.09K USDC (ETH) in 7 minutes via Boost (vs 27 min native).
Settled via @Chainflip.
scan.chainflip.io/swaps/1753…























