The Bitget Heist Attacker Shifts to Zcash Privacy Pools
According to Decrypt, the individual responsible for stealing over $387.5 million from Bitget has begun moving approximately $3.8 million worth of assets into privacy-focused pools within the Ironwood network. This strategic shift marks a significant evolution in how cybercriminals manage illicit funds following specific technical hurdles encountered during their exit strategy.
Ironwood, known for its advanced Zcash features, now hosts these transactions after attempts to utilize other networks were unsuccessful due to strict compliance measures implemented by **Near Intents**. The platform automatically rejected the incoming swaps associated with this heist, forcing the attacker to seek alternative methods for obfuscating their wealth.
While Near Intents initially accepted funds from Bitget shortly after the theft occurred, it subsequently turned away these specific transactions. This pivot was driven by internal policies designed to prevent money laundering and protect financial integrity within decentralized exchanges. Consequently, the criminal operation adapted its tactics immediately. Instead of attempting another failed swap with **Thorchain**, which had previously suffered a near-reject incident due to similar scrutiny, the attacker successfully deposited funds into Zcash’s Ironwood pool.
The implications for security firms are stark: cybercriminals will relentlessly pursue any available channel that offers anonymity or lack rigorous KYC requirements. Their persistence in finding loopholes highlights an ongoing arms race between law enforcement and digital crime syndicates. As exchanges tighten their defenses, attackers simply migrate to less regulated environments like privacy coins.
Experts emphasize that no single solution exists; rather, it is a continuous cycle of detection and evasion. The current situation demonstrates how quickly illicit funds can be re-routed once one path is blocked by technological barriers or regulatory interventions within the crypto ecosystem.
