GoPlus Security Claims THORChain Lacks True Decentralization, Urges Blocking North Korean Funds

GoPlus Security stated that THORChain is not truly decentralized because fund outflows require active signing by validators via TSS threshold signatures. The firm reported that approximately 101.5 BTC (worth about $8.5 million) from the Bitget hack has been moved through the protocol, with an additional 27.63 million XRP (worth about $43 million) currently being converted to BTC. GoPlus called on THORChain to block addresses linked to North Korea. THORChain previously responded to concerns regarding hacker funds by stating that as a decentralized, permissionless protocol, it cannot block transactions.