Bitget Hacker Uses Zcash Privacy Pool for $3.8M After Near Rejects

The individual responsible for the $387.5 million Bitget cryptocurrency exchange hack has begun to move approximately $3.8 million worth of Zcash (ZEC) into the privacy-enhancing Ironwood pool. This action follows an unsuccessful attempt to conduct swaps through Near Intents, which reportedly rejected the transactions. The hacker's strategy involves leveraging privacy technologies to obscure the origin and destination of the stolen funds, making them more difficult to trace by law enforcement and blockchain analytics firms. The Bitget hack, which occurred on November 23, 2023, saw a significant portion of the exchange's hot wallet assets compromised, totaling $387.5 million. The stolen funds were initially moved across various blockchains, including Ethereum and Tron, before the attacker began exploring methods to launder the cryptocurrency. Near Intents, a protocol designed to facilitate complex transactions and automate smart contract interactions, was one of the platforms the hacker attempted to use. However, according to reports, Near Intents' system flagged and rejected the suspicious transactions, preventing the hacker from proceeding with their planned swaps. This rejection likely prompted the attacker to seek alternative methods for laundering the funds, leading them to Zcash. Zcash is known for its implementation of the zk-SNARKs (Zero-Knowledge Succinct Non-Interactive Argument of Knowledge) cryptographic protocol, which allows for shielded transactions. These shielded transactions can obscure the sender, receiver, and amount of ZEC transferred, providing a high degree of privacy. The Ironwood upgrade, which was activated on the Zcash network in November 2023, introduced further enhancements to its privacy features, including the ability to conduct shielded-to-shielded transactions more efficiently. By moving funds into the Ironwood pool, the hacker aims to create a more opaque trail, making it significantly harder to link these funds back to the original Bitget hack. Blockchain analytics firms, such as Chainalysis and Elliptic, specialize in tracing illicit cryptocurrency flows, but the use of advanced privacy features like those in Zcash presents a considerable challenge to their investigative capabilities. The ongoing efforts to trace and recover the stolen funds from the Bitget hack highlight the persistent cat-and-mouse game between cybercriminals and cybersecurity professionals in the digital asset space. The success of the hacker in utilizing Zcash's privacy features for a portion of the stolen funds underscores the importance of robust regulatory frameworks and advanced forensic tools in combating cryptocurrency-related crime.