The cryptocurrency landscape was once again jolted by significant security breaches and evolving regulatory frameworks. In the wake of Bitget’s substantial hack, which resulted in the loss of nearly $388 million, NEAR Intents, a cross-chain asset swapping protocol, announced it had successfully intercepted over $50 million in attempted transfers linked to the attackers. Simultaneously, the U.S. Securities and Exchange Commission (SEC) released updated guidance aimed at clarifying the application of federal securities laws to various crypto assets and activities, offering a potential roadmap for the industry amidst ongoing regulatory uncertainty.
NEAR Intents Foils Major Transfer Attempts Linked to Bitget Hack
NEAR Intents has emerged as a crucial player in tracking and mitigating the immediate aftermath of the Bitget exploit. Alex Shevchenko, General Manager of NEAR Intents, revealed that the protocol’s proprietary SHIELD system detected and blocked more than $50 million in attempted transfers originating from the Bitget hack. These illicit funds were reportedly being moved across various blockchain networks, with a significant portion finding its way to the Ethereum network.
The incident underscores the complex challenges faced by decentralized finance (DeFi) protocols in balancing open, permissionless access with the imperative to prevent illicit financial activities. The attack, which occurred on Thursday, saw attackers abscond with $387.5 million from Bitget, a figure later revised upwards from initial reports of $351.6 million after accounting for additional transfers on Zcash and Tron.
Shevchenko detailed the effectiveness of NEAR Intents’ SHIELD system, stating that while over $50 million in transfers were blocked, the system managed to freeze approximately $503,000 in funds during the execution of these transactions. An additional $166,000 in suspected stolen funds managed to pass through before countermeasures could be fully implemented. This success highlights the growing sophistication of on-chain surveillance and interdiction tools within the crypto ecosystem.
The situation also brought THORChain, another cross-chain liquidity protocol, under scrutiny, with calls for it to block addresses associated with the Bitget hack. This situation illuminates a persistent tension within the crypto space: how to maintain the core principles of decentralization and open access while actively combating criminal enterprises that exploit these very features.
Shevchenko articulated a strong stance on the ethical considerations of permissionless systems, arguing that they do not inherently necessitate neutrality in the face of criminal activity. "The people who build these systems make choices about what those protocols enable," Shevchenko stated. "Refusing to help launder stolen assets is one of ours." He further emphasized the foundational importance of property rights for functional markets, asserting that a financial system that grants unrestricted monetization rights to thieves is not a freer system, but rather one that protects criminals. "Such systems cannot become the economic backbone of the future," he added, signaling a potential shift towards more proactive measures against illicit fund flows.
SEC Clarifies Crypto Securities Law Application, Offering New Interpretations
In parallel developments, the U.S. Securities and Exchange Commission (SEC) has issued updated Frequently Asked Questions (FAQs) that aim to provide greater clarity on when certain cryptocurrency assets and activities may fall outside the purview of federal securities laws. This guidance builds upon the SEC’s March interpretation of the Howey test, the long-standing legal framework used to determine whether an asset constitutes an "investment contract" and therefore a security.
The newly released FAQs address several key areas, including token buybacks, network development, and staking receipt tokens. For token buybacks, the SEC staff indicated that such activities might not be considered an "investment contract" if a crypto network is already functional and lacks a central controlling party. Similarly, ongoing work to maintain or improve an already functioning network may also be deemed outside the scope of managerial efforts typically associated with securities. Furthermore, the guidance clarifies that staking receipt tokens will not be automatically treated as securities, a point of significant interest for many decentralized staking protocols.
While this guidance is non-binding and does not alter existing legislation, it offers valuable insight into how SEC staff intends to apply current securities regulations to the evolving digital asset space. This can provide crypto projects with more confidence in structuring their operations and tokenomics to avoid triggering securities law implications.
The SEC’s move follows a similar initiative from the Commodity Futures Trading Commission (CFTC), which also released guidance on digital assets. These actions come at a critical juncture, as legislative efforts to establish a clear statutory framework for digital asset oversight, such as the CLARITY Act, have stalled in the Senate. Both regulatory bodies are now proceeding under their existing statutory authorities, highlighting the ongoing efforts to adapt existing legal structures to the digital asset revolution.
The implications of this guidance are far-reaching. For legitimate crypto projects seeking to operate within the bounds of the law, it offers a clearer path forward. However, it also reinforces the SEC’s position that the substance of a transaction, rather than its form, will determine its regulatory treatment. Projects that continue to operate in a manner that resembles traditional securities offerings, regardless of their use of blockchain technology, are likely to face increased scrutiny.
Bitget Resumes Bitcoin Withdrawals Amidst Ongoing Hacker Activity
Following the significant security incident, crypto exchange Bitget has announced the resumption of Bitcoin (BTC) withdrawals. The exchange had suspended all withdrawals after the breach, which saw nearly $388 million in assets compromised. The attacker, meanwhile, has continued to move the stolen cryptocurrency, reportedly utilizing THORChain to swap Ethereum (ETH) from the stolen funds.
Bitget confirmed that Bitcoin withdrawals on the Bitcoin network and the BNB Smart Chain were the first to be reinstated on Monday. The exchange’s CEO, Gracy Chen, stated during a Monday ask-me-anything session that BTC withdrawals were prioritized due to the completion of their withdrawal pipeline. She indicated that other assets and networks, including Ether (ETH) and Tether’s USDt (USDT), would follow as security checks progressed.
The Sept. 24 breach affected part of Bitget’s hot and warm wallet infrastructure, while the exchange assured users that its cold wallets, which hold the majority of assets, remained secure. The incident serves as a stark reminder of the persistent security vulnerabilities within centralized exchanges and the critical need for robust security protocols.
The attacker’s continued activity, including the alleged use of THORChain for fund obfuscation, highlights the interconnectedness of the crypto ecosystem and the challenges of tracing and recovering stolen assets once they enter the broader network. The decision by NEAR Intents to block over $50 million in transfers demonstrates a growing capability and willingness within the DeFi space to intervene in such situations, even if it introduces complexities regarding neutrality.
The revised stolen amount of $387.5 million from Bitget is a substantial figure, placing this incident among the largest crypto hacks in history. Such events not only result in significant financial losses for users but also erode trust in the broader crypto market. The speed at which Bitget has moved to resume operations, while reassuring to its user base, also raises questions about the thoroughness of post-hack investigations and security enhancements.
Broader Implications for the Crypto Industry
The confluence of these events — a major exchange hack, proactive interdiction by a DeFi protocol, and evolving regulatory guidance — paints a complex picture of the current state of the cryptocurrency industry.
Enhanced Security Measures and Vigilance: The Bitget hack and the subsequent actions by NEAR Intents underscore the critical need for exchanges and DeFi protocols to continuously invest in and upgrade their security infrastructure. The ability to detect and block illicit transfers, as demonstrated by NEAR Intents, is becoming an essential component of operational resilience. This also suggests a potential increase in collaboration between centralized entities and decentralized protocols in combating cybercrime.
Regulatory Clarity and Compliance: The SEC’s updated guidance, while non-binding, represents a significant step towards providing more concrete direction for crypto projects. This clarity, however, comes with the implicit understanding that regulatory oversight is not diminishing. Projects that can demonstrate compliance with these interpretations are likely to gain a competitive advantage and foster greater investor confidence. The ongoing legislative deadlock means that regulatory frameworks will likely continue to evolve through agency interpretations and enforcement actions.
The Decentralization vs. Security Debate: The incident involving THORChain and calls for blocking attacker addresses highlights the ongoing debate about the ideal balance between decentralization and security in the crypto space. While permissionless systems are designed to be open and resistant to censorship, the practical realities of combating crime necessitate mechanisms for intervention. NEAR Intents’ proactive stance suggests a pragmatic approach, where the ethical imperative to prevent the laundering of stolen assets can supersede strict adherence to absolute neutrality. This could lead to further development of decentralized identity and reputation systems, or more sophisticated on-chain governance mechanisms for addressing illicit activities.
Investor Confidence and Market Stability: Major hacks and regulatory uncertainty inevitably impact investor confidence. While the crypto market has shown resilience in the past, repeated large-scale exploits can lead to significant price volatility and a general apprehension among potential investors. The successful recovery or blocking of stolen funds, as seen with NEAR Intents, can help to mitigate some of this damage and demonstrate the potential for the ecosystem to self-correct. However, the scale of the Bitget hack serves as a potent reminder of the inherent risks in the digital asset space.
The coming months will likely see continued developments in both security technologies and regulatory approaches. As the industry matures, the interplay between innovation, user protection, and regulatory compliance will remain a defining characteristic of its trajectory. The events of this past week offer a glimpse into a future where proactive security measures and clearer regulatory frameworks may become increasingly intertwined, shaping the very foundations of the decentralized financial world.
