“When we say that we want a system that is permissionless, that allows anyone to do anything and is censorship resistant, well, censorship resistance also means this. … Circuit breakers are needed. Protocols should start having controls that pause things when too big amounts of money are being moved.”

Unchained · Crypto & Web3 · November 2026

Context

Laura Shin asked whether DeFi will increasingly be used to launder stolen money, as it was when the Binance attackers borrowed ETH on Aave against stolen stablecoins. Pablo says that is the downside of permissionless systems, and that protocols will need automatic pauses for very large flows.

Listen to the episode → More from Pablo Sabbatella → More Crypto & Web3 quotes →

Transcript

Unchained Around 48:42 into the episode

Pablo Sabbatella

I agree. Like the laundering of money and movements of money there in DeFi is not my expertise. I was not able to look into that. Again, there are so many things going on at the same time that it's difficult. Do you think

Laura Shin

DeFi might be used in this way more and more? Yeah,

Pablo Sabbatella

yeah, yeah. Yeah, totally. Yeah. Yeah. It's the, it's when we say that we, that we want to have a system that is permissionless, that allows anyone to do anything and to be censorship resistant, well, censorship resistance also means this, right? So yeah, it's going to be used for that. I think that the real issue for DeFi is not this, but like all the last hacks in the last three years, I think that nearly all of them were related to OPSEC. But let's not forget that smart contract security still exists, right? And I think that's something that may be connected to also very big transactions or swaps or moments of stolen money through DeFi. But also, if in the future we start having again DeFi hacks, is that protocols should start having controls that stop or put some kind of pauses when too big amounts of money are being moved, right? Circuit breakers are needed. Definitely. So I think that this will make some DeFi protocols realize that they will have to start making some changes. I don't know exactly which ones, again, because DeFi is not my expertise, but some things will need to…

Laura Shin

I mean, the only danger with that is like, especially with AI, I could see if there's some sort of threshold, then you would just send a bunch of transactions that are under the threshold. But yeah. All right. Well, I did also notice one other thing, which is early this morning, Arkham tweeted…

Speaker 1

So it's kind of funny that you highlighted this tweet. I actually looked at this tweet slightly before being on the show. And actually, it's like, it's not, it's not correct analysis. So it looks like what's happened is Arkham's traced through a service, actually ThorChain. And so the actual assets…

Laura Shin

that, like, is that from an analysis, like what percentage of transactions on ThorChain are for laundering stolen funds? Is it like some puzzles?

Speaker names come from our own diarization. The position is estimated from where the line sits in the episode.

More from Unchained

“I will say that easily 90% of organizations in this ecosystem don't have someone that really knows operational security in their company. And the worst issue is that many of them think that they are okay, but they are not okay. … If there's one thing they can do without hiring any company, it's at least get an EDR. They say, 'Oh, it's a problem for my privacy.' And in the end, what happens? They get hacked, they have no privacy and no money.” — Pablo Sabbatella, Unchained

“It's like saying you have, let's say, a pen in a bank that is used to write checks. Every customer that goes to the bank and wants to withdraw money, that pen is used to write the checks. They didn't steal the check, but they were able to access the pen inside the bank and sign transactions. … Nine out of ten of the big attacks that happened in the last three years all start with a laptop being infected.” — Pablo Sabbatella, Unchained