Stolen Crypto Moved Into Zcash Shielded Pools
Deposits into Zcash’s Ironwood shield hide sender, recipient, and amount details, making on‑chain tracing and recovery much harder.
Overview
- Bitget said $387.5 million was taken in its Sept. 24 security breach and has published attacker addresses to help trace and recover assets.
- On-chain researcher ZachXBT traced roughly 2,700–2,746 ZEC from wallets linked to the Bitget attacker into Zcash’s Ironwood shielded pool on Sept. 30.
- Investigator Specter reported on Oct. 17 that funds tied to the Cryptobills Ledger incident and a $12 million Triple-A exploit also moved into Zcash, though he did not publish full transaction trails or precise amounts.
- Once assets enter a Zcash shielded pool the protocol conceals who sent, who received, and how much moved, so tracing typically works only up to the point of deposit and becomes far harder afterward.
- Bitget has hired forensic firms, shared attacker addresses publicly, rebuilt a protection fund and offered recovery bounties, while analysts warn increased use of ZEC privacy features could deepen market pressure on ZEC and draw regulatory scrutiny.