Blockchain analytics firm AMLBot says it traced about 4 BTC linked to the Bitget hack moving into Wasabi CoinJoin, a privacy-focused Bitcoin mixing service, highlighting the persistent challenge of following illicit funds after a major exchange breach.
What AMLBot Traced From the Bitget Hack
AMLBot, which describes itself as a crypto compliance and blockchain analytics platform, attributed the movement of approximately 4 BTC to wallet activity connected to the Bitget hack. The firm identified on-chain Bitcoin transaction activity leading to a Wasabi CoinJoin entry point as the destination of those funds. For related coverage, see Solana Attracts Over $188M in Fresh Capital This Week.
The figure of about 4 BTC represents a portion of the broader hack proceeds rather than the total stolen amount. AMLBot’s tracing claim has not been independently confirmed by a second on-chain analytics provider, and the firm’s attribution methodology was not detailed in the report summary available at publication time. For related coverage, see GoBTC Pay Tests Bitcoin Payments for Agentic Commerce.
Bitget is a major centralized exchange that has expanded its product offerings in recent months, including a move into tokenized stocks. The hack represents a separate and serious security incident distinct from those business developments.
Why Wasabi CoinJoin Matters to the Trail
CoinJoin is a protocol that pools Bitcoin transactions from multiple users into a single transaction, making it harder to trace which input corresponds to which output. Wasabi Wallet is one of the most widely used implementations of CoinJoin and has appeared in prior investigations of illicitly obtained Bitcoin.
When funds enter a CoinJoin round, the direct on-chain link between source and destination is obscured, though it is not entirely severed. Analytics firms use heuristics and graph analysis to attempt to follow funds through mixing rounds, but the process introduces significant uncertainty. AMLBot’s ability to trace the approximately 4 BTC to Wasabi’s entry point does not necessarily mean the firm can follow those funds beyond the mix itself.
This is not the first time stolen exchange funds have been routed through privacy tools. A prior case involving large wallet movements tied to the Alameda/FTX estate demonstrated how labeled addresses can be monitored even years after a breach, though mixing complicates that monitoring considerably.
Implications for Crypto Compliance and Blockchain Analytics
AMLBot’s report illustrates both the capability and the limits of modern blockchain forensics. Analytics platforms can identify fund movements and flag wallet clusters as suspicious, but tracing does not by itself prove theft, establish legal attribution, or guarantee asset recovery. Law enforcement and exchange compliance teams rely on such reports as investigative leads, not conclusive evidence.
For exchanges monitoring outflows after a hack, the window before funds reach a mixer is the period when freezing at downstream platforms is most feasible. Once 4 BTC enters a CoinJoin round, coordinated action across multiple services would be required to intercept the outputs, and outcomes are uncertain.
The case also reinforces why Bitcoin’s on-chain transparency cuts both ways: public ledgers make initial tracing possible, but privacy tools built on top of that ledger can partially offset that transparency. Compliance teams at exchanges and custodians increasingly treat CoinJoin outputs as elevated-risk inputs, flagging them for additional review regardless of whether a specific theft has been confirmed.
Whether the approximately 4 BTC can be linked to individual recipients after the mixing round depends on factors AMLBot has not publicly disclosed, including how many mixing rounds were completed and whether any outputs moved to identifiable exchange deposit addresses afterward.
Additional source references: source document 1.
Disclaimer: This article is for informational purposes only and does not constitute financial or investment advice. Cryptocurrency and digital asset markets carry significant risk. Always do your own research before making decisions.
