Bitget Hack Funds Enter Wasabi CoinJoin as Most Remain Dormant

A significant development has occurred in the ongoing Bitget security breach case as roughly $4 worth of Bitcoin (BTC) entered a Wasabi CoinJoin transaction. According to AMLBot, this movement represents the first confirmed instance of stolen funds entering privacy-focused infrastructure. The assets moved through several blockchains and cross-chain services before reaching the CoinJoin round.

The trail began with a Bitget-linked TRON wallet that converted TRX into USDT, which was then bridged to Ethereum and exchanged for approximately 145 ETH. Those assets later moved through THORChain and produced about 4.59 BTC, extending the trail from TRON to Ethereum and then Bitcoin.

Despite this latest movement, most funds linked to the Bitget breach remain dormant in AMLBot's assessment. Approximately $343.2 million, representing 88.1% of roughly $389.4 million tracked, has not moved across 13 attacker wallets. Those wallets held various cryptocurrencies including ETH, XRP, and ZEC.

Bitget raised its confirmed loss estimate to $387.5 million after adding previously uncounted Zcash and TRON assets. The exchange will resume withdrawals on September 28 with Bitcoin, with broader restoration through October 2.