Bitget Hackers Use Wasabi CoinJoin to Launder Stolen Funds

The Bitget cryptocurrency exchange suffered a significant security breach on September 24, resulting in an estimated loss of $387.5 million. The incident involved unauthorized transfers from the exchange's hot and warm wallet infrastructure, with affected assets including Ethereum, XRP, USDT, USDC, Zcash, and others.

According to blockchain compliance firm AMLBot, some of the stolen assets have been laundered through Wasabi CoinJoin, a mixing service that combines Bitcoin inputs and outputs from multiple participants in a single transaction. The firm's tracing connected approximately 4 BTC in one CoinJoin round to funds originating from a Bitget-linked TRON wallet.

The movement of stolen funds was complex, involving four networks before reaching the Wasabi CoinJoin round. AMLBot described the activity as an apparent attempt to obscure the movement of stolen assets.