Actually, based on Thor's mechanism, there’s not much it can do. Intervention measures can’t recover the stolen funds. In these two incidents (bybit/bitget), the hackers kept each transaction on Thorchain around $150k. They also knew that even if Thorchain stopped the entire chain, their maximum loss would just be that amount. Worst case, they’d just use other routes. But for Thorchain, it either has to maintain an active and constantly updated blacklist forever, or shut down the chain permanently over this $150k. Plus, it involves complex coordination issues between different pools (ETH/RUNE, BTC/RUNE) for LPs. From the very start, this is already a highly asymmetric game.