AMLBot traces ~4 BTC from Bitget hack through multiple bridges and swaps into Wasabi CoinJoin for mixing.
Security & Exploits ·
Blockchain analytics platform AMLBot traced roughly 4 BTC from the Bitget theft into Wasabi CoinJoin, a privacy mixer, according to the firm's investigation. The stolen funds originated in a Bitget TRON wallet and were identified within a single CoinJoin round.
The theft's proceeds moved through a complex chain of conversions and bridges. Attackers converted the initial TRX holdings to USDT, then bridged the stablecoin to Ethereum via USDT0, swapped it into approximately 145 ETH, and routed the proceeds through THORChain before converting them into roughly 4.59 BTC. The BTC was then fragmented and funneled into CoinJoin for obfuscation.
AMLBot has blacklisted the implicated addresses and indicated ongoing surveillance of the attacker's BTC holdings for signs of additional CoinJoin activity, though the extent to which such monitoring can track funds through privacy mixers remains unresolved.