THORChain garnered ~$404,600 in swap fees between October 5 and 11.The total is more than twice the ~$191,500 it earned the week prior to its spike in September, and no exploit-related money flowed through the protocol.Ethereum leads the latest seven days with $129,183DeFiLlama shows $404,608 in 7-day fees for the cross-chain swap protocol. The week of September 18 to 24 brought in ~$191,500 by Cryptopolitan’s count of DeFiLlama’s daily data prior to the late-month spike.Ethereum had the largest slice of the pie over the past seven days, at $129,183. THORChain’s own chain was next at $95,516, followed by Bitcoin at $74,517 and Tron at $64,747.No major spikes or exploits were reported in October.Active wallets rose to 25,000 in September from 23,500 in August. By September, Protocol-Owned Liquidity, the pool capital THORChain owns itself, had attracted approximately 946,000 RUNE in deposits.THORChain has also adjusted its system income split. RUNE burn share goes from 5% to 1% and 20% goes to POL now.Swap revenue still sits 82% under the exploit weekThe latest week is still far below the level THORChain attained at the end of September. Exploit week of September 25 to October 1 saw ~$2.28 million in fees, again based on DeFiLlama’s daily series.Cryptopolitan’s tally of the same data shows the latest week down 82% from the exploit week. Fees for October 2 to 8 were down 90% from the exploit week.The network income for September was $3.01 million versus $615,000 in August. Swap volume jumped to $2.40 billion from $613 million.Most of it came in five days. Flows tied to the Bitget hack between September 25 and September 29 constituted around 57-63% of the month’s volume and income, or about $1.37 billion in swaps and close to $1.9 million in income.Bitget lost ~$387.5 million in a breach on September 24, revised up from an initial $351.6 million estimate after Zcash and TRON transfers were included.According to Cryptopolitan, Bitget CEO Gracy Chen made a public appeal on September 26 for the protocol to refuse service to the attacker’s wallets. Circle and Tether froze about $318,000 in stablecoins tied to the hack on September 25.THORChain declined. The protocol said its emergency network halt is a security feature for the entire system, not a way to freeze individual addresses.It also hadn’t blacklisted wallets following its own $10.7 million vault exploit earlier in 2026. The network has no admin key or controlling multisig, per the protocol itself.THORChain’s State of the Network report said the active set grew from 87 to 103 nodes in September.If you're reading this, you’re already ahead. Stay there with our newsletter.