About 4 Bitcoin Linked to Bitget Hack Moved to Wasabi CoinJoin Service
Summary
- It said about 4 BTC linked to the Bitget hack was found to have flowed into Wasabi Wallet's CoinJoin service.
- The funds were converted from Tron (TRX) through Tether (USDT), Ethereum (ETH) and THORChain, then turned into about 4.59 BTC before being split and transferred.
- AMLBot said it had placed the related wallet addresses on a blacklist and is tracking any additional use of CoinJoin, though the total losses and the final route of the stolen funds remain unconfirmed.
Forecast Trend Report by Period



About 4 Bitcoin linked to the Bitget hack was found to have moved into a CoinJoin service that makes transactions harder to trace.
Wu Blockchain reported on September 27 that blockchain analytics firm AMLBot had confirmed part of the funds believed to have been stolen from Bitget was transferred to Wasabi Wallet's CoinJoin service.
AMLBot traced about 4 BTC that entered a specific CoinJoin transaction and found the funds were linked to a Tron wallet associated with Bitget. The money moved along a complex path across multiple blockchains and crypto assets.
Specifically, the funds were converted from Tron (TRX) into Tether (USDT) and moved to the Ethereum network through USDT0. They were then exchanged for about 145 ETH before being converted into about 4.59 BTC through cross-chain liquidity protocol THORChain.
The Bitcoin was then split among multiple addresses before being sent to the CoinJoin service. CoinJoin combines Bitcoin transactions from multiple users into a single transaction, making it difficult to trace the movement of individual funds.
AMLBot has blacklisted the related wallet addresses and is continuing to track whether the attacker uses CoinJoin again with other Bitcoin holdings.
Still, the roughly 4 BTC identified in this case was traced from one specific CoinJoin transaction. It does not confirm the total losses from the Bitget hack or the final destination of the stolen funds.