Bitget Hacker Sends $78.6M in Bitcoin Into CoinJoin Mixers
Widespread CoinJoin use with intermediary hops is breaking on-chain links, leaving recovery prospects unclear.
Overview
- Arkham reported that 1,052.34 BTC, about $78.61 million, moved from wallets labeled linked to the Bitget breach between Nov. 6 and Nov. 11.
- Roughly 847.26 BTC entered 66 CoinJoin transactions during that period, representing about 80.5% of the six-day outflows.
- Arkham’s tracing shows some funds went directly from the labeled wallets into CoinJoin while other coins passed through fresh addresses one to six hops before mixing.
- The labeled wallets still hold about 959.29 BTC, roughly $71.44 million, plus smaller stablecoin balances, shrinking the pool of traceable assets on-chain.
- Bitget says it fixed the exploited vulnerability, named Mandiant and SlowMist as partners, and is offering separate 5% bounties for frozen and recovered funds, but heavy use of CoinJoin and routing is increasingly hindering forensic tracing and recovery efforts.