Bitget Hack Perpetrators Route Stolen Funds Through Zcash Privacy Pool
Hackers from the Bitget breach are using Zcash's Ironwood privacy pool to obscure approximately 3.9 million dollars in stolen cryptocurrency after their initial money laundering attempt through NEAR Intents was blocked. About 2,746 ZEC were moved into the protected pool, making fund tracking significantly more difficult for investigators. The overall Bitget hack is estimated at 387.5 million dollars, with over 50 million in attempted swaps previously intercepted.
The Bitget breach, discovered on September 24, represents one of the largest cryptocurrency exchange compromises on record. Hackers initially attempted to convert stolen assets through NEAR Intents, a decentralized protocol designed with safeguards to detect suspicious fund movements. When that avenue successfully blocked over $50 million in transactions, the perpetrators pivoted to alternative networks including THORChain, which operates without centralized intervention capabilities.
The shift to Zcash's Ironwood privacy pool marks an escalation in sophistication. Unlike public blockchains where all transactions remain permanently traceable, Zcash's shielded pools obscure transaction details once funds enter the system, though initial deposits remain visible. Of approximately 18,900 ZEC stolen, roughly 2,746 units were deposited into Ironwood, representing about 15 percent of the total haul.
This incident underscores ongoing tensions between cryptocurrency's transparency benefits and privacy features. The breach may reinforce regulatory pressure on privacy-focused cryptocurrencies, as authorities struggle to recover stolen assets. Exchange users could face prolonged withdrawal restrictions during recovery efforts. The case may also influence future security protocols across trading platforms and prompt policymakers to reconsider regulatory frameworks governing privacy coins, potentially affecting legitimate users seeking transaction confidentiality.