A portion of the cryptocurrency stolen during the recent security breach at crypto exchange Bitget has entered a Wasabi CoinJoin mixing round, according to blockchain compliance firm AMLBot. Investigators traced roughly four bitcoins linked to the theft through multiple blockchains and swap routes in an apparent effort to obscure the trail.
The movement involves assets originating from a Bitget-linked TRON wallet. According to tracing details published by AMLBot, the funds were first converted from TRX into USDT, moved to Ethereum via the omnichain protocol USDT0, swapped into approximately 145 ETH, and then bridged through THORChain to yield about 4.59 BTC before entering the privacy-focused mixing service. Crypto.news reported that AMLBot has blacklisted the associated addresses while continuing to monitor the remaining funds.
Escalating Losses and Dormant Wallets
The newly tracked CoinJoin activity represents only a fraction of the massive security breach. Bitget recently updated its estimated losses to approximately $387.5 million following a detailed internal classification of missing assets across its hot and warm wallet infrastructure. The upward revision accounts for additional Zcash and TRON tokens identified after initial assessments.
Despite the complex routing of a small portion of the capital, blockchain analytics indicate that the vast majority of the stolen assets remain stationary. AMLBot reported that roughly $343 million—about 88% of the tracked total—remains untouched across thirteen dormant attacker-controlled addresses, including eight Ethereum wallets holding around 68,300 ETH and four XRP addresses holding approximately 83 million XRP.
Phased Withdrawal Restoration
As security audits continue with assistance from firms such as Mandiant and SlowMist, Bitget is moving forward with a phased schedule to restore standard withdrawal services. The exchange announced that Bitcoin withdrawals would reopen on September 28, followed by Ethereum-network tokens on September 29, stablecoins on September 30, and remaining fiat and peer-to-peer services by October 2.
Bloomingbit noted that market observers are monitoring potential confidence impacts, though trading metrics and broader structural supports remain stable. Bitget maintains that its Protection Fund, valued at over $464 million during the pause, will fully cover customer losses without impacting individual account balances.