Particle.news

Bitget Hacker Sends $78.6M in Bitcoin Into CoinJoin Mixers

Widespread CoinJoin use with intermediary hops is breaking on-chain links, leaving recovery prospects unclear.

Overview

  • Arkham reported that 1,052.34 BTC, about $78.61 million, moved from wallets labeled linked to the Bitget breach between Nov. 6 and Nov. 11.
  • Roughly 847.26 BTC entered 66 CoinJoin transactions during that period, representing about 80.5% of the six-day outflows.
  • Arkham’s tracing shows some funds went directly from the labeled wallets into CoinJoin while other coins passed through fresh addresses one to six hops before mixing.
  • The labeled wallets still hold about 959.29 BTC, roughly $71.44 million, plus smaller stablecoin balances, shrinking the pool of traceable assets on-chain.
  • Bitget says it fixed the exploited vulnerability, named Mandiant and SlowMist as partners, and is offering separate 5% bounties for frozen and recovered funds, but heavy use of CoinJoin and routing is increasingly hindering forensic tracing and recovery efforts.