NightWatch ⚡️

When the biggest crypto heist in history happened, the FBI didn't call a CEO. They didn't contact a company administrator or issue instructions to some central authority capable of freezing everything. They had to publicly ask. Ask exchanges. Ask DeFi services. Ask node operators scattered across the world, many of them pseudonymous, to block transactions involving stolen funds. Read that again. The FBI, one of the most powerful law enforcement agencies in the world, had no central switch to flip on THORChain. No administrator to summon. No compliance department to send an email to. Here's what happened. More than $6 billion in virtual assets was stolen from Binance on October 29, 2026. The FBI attributed the attack to North Korea's TraderTraitor group. On October 31, the FBI, alongside the U.S. Secret Service and IRS Criminal Investigation, published 628 addresses associated with the stolen funds and issued a public appeal to the crypto industry. Among those specifically named were THORNode operators. Not a company. Not a CEO. Independent network operators. That tells you something important about the infrastructure they're dealing with. @THORChain is permissionless. You don't apply for an account, seek approval from a central authority or pass KYC to use the underlying protocol. You bring an asset and swap it. That same open infrastructure can serve a family trying to protect its savings from a collapsing currency, someone living under financial restrictions, a trader seeking access to global markets, or a state-sponsored criminal trying to move stolen funds. That's the uncomfortable reality of permissionless technology. The same system that protects access for people who need financial freedom cannot simply discriminate based on who someone is or whether their actions are politically acceptable. And that's precisely the point. A system that can be switched off for the people we consider villains can eventually be switched off for anyone. All it takes is giving someone the authority to decide who deserves access. Permissionlessness only means something when it applies universally, including to people whose actions we strongly condemn. Let's be clear: this isn't an argument that criminal activity should be celebrated or ignored. More than $6 billion in stolen assets is a serious matter. The victims deserve justice, and the people building permissionless infrastructure should take the associated risks seriously. In traditional finance, the ability to freeze funds is often presented as a necessary feature. And sometimes it is. But that same authority can be used against ordinary people, political dissidents, businesses and individuals who suddenly find themselves on the wrong side of whoever controls the system. The power to censor rarely comes with a guarantee that it will always be used for the right reasons. Decentralization is a trade, not a fairy tale. You give up the convenience of having a central authority that can intervene whenever it chooses. In exchange, you get a system where access isn't dependent on obtaining permission from that authority. The FBI having to publicly appeal to THORNode operators isn't necessarily a failure of the system. It highlights an important distinction between asking independent participants for cooperation and having the power to issue an order to a central administrator. Whether you see that as a triumph of decentralization or a frightening limitation depends largely on what you believe about power, financial freedom and who should be trusted to control access. I know where I stand. Code that treats everyone equally, without asking who they are or whether they have permission to participate, is worth protecting. Disclaimer: This post is for educational and informational purposes only. It is not an endorsement of criminal activity, illicit finance or the movement of stolen funds. It is intended to explore the principles, trade-offs and implications of permissionless infrastructure and decentralization.