Bitget hacker routes 4 BTC through Wasabi CoinJoin
Some assets linked to the Bitget security breach have entered Wasabi CoinJoin after moving through several blockchains and swap routes, according to blockchain compliance firm AMLBot. AMLBot said on Sept. 27 that its tracing connected roughly 4 BTC in one CoinJoin round to funds originating from a Bitget-linked TRON wallet. The firm described the activity as an apparent attempt to obscure the movement of stolen assets. The finding comes after Bitget revised the value of assets transferred to attacker-controlled addresses to approximately $387.5 million. The exchanges official investigation update said the new total includes Zcash and TRON assets that were missing from its initial $351.6 million estimate. Update: It seems stolen funds from the @bitget hack have started to be laundered through Wasabi CoinJoin (mixer) Our tracing links ~4 BTC in a CoinJoin round back to a Bitget TRON wallet. The funds were swapped from TRX to USDT, bridged to Ethereum via @USDT0_to, swapped to ~145… https://t.co/8JBaoMM1xp pic.twitter.com/ncTVyeIT3S — AMLBot (@AMLBotHQ) September 26, 2026 Bitget funds moved through four networks before CoinJoin AMLBot traced a multi-stage route beginning on TRON. According to the firms account, the attacker first converted TRX into USDT. The funds were then moved to Ethereum through USDT0, an omnichain version of Tether designed









