The security firm says North Korea-linked wallets moved funds through the cross-chain protocol, raising questions about its governance structure.
GoPlus Security has raised concerns about THORChain’s decentralization claims, citing transaction flows linked to North Korea. The Web3 security firm argues that funds tied to Democratic People’s Republic of Korea entities moved through the cross-chain protocol, complicating THORChain’s public position that no central party controls its operations.
THORChain is a decentralized liquidity network that lets users swap assets across different blockchains without relying on a centralized custodian. Its design has made it a common destination for large-scale swaps, including transactions following high-profile hacking incidents. Because the protocol has no single operator holding user funds, THORChain has long described itself as resistant to seizure or centralized shutdown.
That framing sits at the heart of the dispute. GoPlus Security’s challenge suggests that decentralization claims carry real consequences beyond marketing language. If a protocol is genuinely decentralized, no single party can freeze or reverse transactions, even those tied to sanctioned actors. If some form of centralized control or influence exists, however, the protocol’s exposure to illicit fund flows becomes a governance and compliance question rather than simply a technical one.
North Korean hacking groups, including those associated with the Lazarus Group, have a documented history of using decentralized finance infrastructure to launder proceeds from crypto theft. Investigators and blockchain analytics firms have repeatedly traced stolen funds through cross-chain bridges and swap protocols. These tools allow attackers to convert assets across multiple blockchains quickly, often before enforcement agencies can respond.
The involvement of a security firm like GoPlus in this specific dispute adds a technical dimension to a debate that has typically played out among policymakers and blockchain analytics companies. GoPlus specializes in on-chain risk detection, and its scrutiny of THORChain’s architecture suggests the disagreement extends beyond simple transaction tracing into questions about protocol governance itself.
THORChain has faced scrutiny before over its role in facilitating large swaps connected to security incidents. Supporters of the protocol argue that decentralized infrastructure should not be held responsible for how it is used, comparing it to open internet protocols. Critics counter that decentralization claims should not shield projects from accountability when illicit flows are identifiable on-chain.
The current dispute has not been resolved through any official statement from THORChain addressing GoPlus Security’s specific claims, based on available reporting. Both parties’ positions reflect a broader tension in the crypto industry between the ideal of permissionless infrastructure and the practical reality of sanctions enforcement and anti-money laundering expectations.
The disagreement is unlikely to move markets immediately, but it touches on a sensitive area for decentralized finance protocols generally. Regulators in the United States and elsewhere have increased pressure on platforms that process funds linked to sanctioned entities, regardless of whether those platforms are centralized or decentralized.
If scrutiny of THORChain’s decentralization claims intensifies, it could influence how other cross-chain protocols position themselves publicly regarding governance and control. Liquidity providers and integrators may also watch closely, since perceived regulatory risk can affect a protocol’s standing with exchanges, wallets, and institutional partners.
The dispute between GoPlus Security and THORChain highlights an unresolved tension in decentralized finance: how protocols that claim no central control should respond when illicit funds pass through their systems. How THORChain addresses the challenge, if at all, may shape broader industry conversations about accountability in permissionless infrastructure.
THORChain is a decentralized protocol that allows users to swap crypto assets across different blockchains without a centralized custodian holding the funds.
GoPlus Security said funds linked to North Korea moved through THORChain, challenging the protocol’s public claims of being fully decentralized.
A truly decentralized protocol has no single party able to freeze or reverse transactions, which affects how sanctions enforcement and compliance obligations apply to it.
Based on available reporting, there is no indication that THORChain has issued an official response directly addressing GoPlus Security’s allegations.
Original source: AltcoinGordon
Syndicated coverage. Originally reported by altcoingordon.com.