The $387.5 million hack of crypto‑exchange Bitget continues to unfold, with investigators reporting that the thief has now concealed approximately $3.9 million worth of Zcash (ZEC) in Zcash’s Ironwood privacy pool after a $50 million swap route on Near Protocol was blocked.
Background of the Bitget Breach
Bitget disclosed that the breach was executed through a zero‑day vulnerability in a third‑party security product, a detail first reported by BleepingComputer. The exploit allowed the attacker to drain a combination of stablecoins and other assets, culminating in the loss of $387.5 million – one of the largest crypto thefts on record.
Near Protocol Blocks $50 Million Laundering Attempt
According to Decrypt, the hacker initially sought to launder the stolen funds via a series of high‑volume swaps on Near Protocol, targeting an estimated $50 million of assets. Near’s automated “Intents” system flagged and rejected the transactions, forcing the criminal to seek an alternative route.
Funds Channeled into Zcash’s Ironwood Pool
After the Near blockade, the attacker moved a batch of ZEC into Zcash’s Ironwood shielded pool – a privacy‑enhancing feature that obscures transaction details. CryptoTicker reported that 2,746 ZEC, valued at roughly $3.8 million, were transferred, while Decrypt and other outlets rounded the figure to $3.9 million. The Ironwood pool’s design makes it “significantly harder to trace” the funds, according to CoinDesk.
"The attacker moved roughly $3.9 million worth of ZEC into Zcash’s Ironwood shielded pool, effectively hiding the transaction from public view," said multiple crypto news outlets including CoinDesk and CryptoTicker.
Market Reaction and Bitget’s Response
Bitget has begun reinstating USDT withdrawals, a step announced in a brief statement and echoed by Crypto News. The partial restoration helped calm panic among traders, though the broader market remains wary. Bitcoin and major altcoins showed muted movement in the days following the breach, as investors weigh the security implications of large‑scale thefts and the growing use of privacy tools for illicit flows.
Legal and Technical Implications
Cointelegraph cited crypto‑lawyer Yuriy Brisov, who argued that while THORChain – a cross‑chain liquidity platform – cannot legally block addresses linked to the stolen assets, prosecuting developers for money‑laundering facilitation is “complicated.” Brisov warned that existing anti‑money‑laundering (AML) frameworks struggle to keep pace with decentralized protocols that can obscure fund origins.
Regulators in several jurisdictions have already signaled heightened scrutiny of privacy‑focused blockchains. The Ironwood pool, introduced by Zcash in 2023, encrypts transaction metadata, challenging traditional blockchain analysis tools. As the Bitget case demonstrates, such technology can be rapidly adopted by criminals seeking to evade detection.
Analysts predict that the ongoing investigation will prompt exchanges and DeFi platforms to reinforce security audits, especially of third‑party integrations. Meanwhile, law‑enforcement agencies are reportedly collaborating across borders to trace the remaining portions of the $387.5 million theft, though the Ironwood shield may limit the effectiveness of conventional blockchain forensics.
Market Snapshot
| Asset | Price | 24h | Market Cap |
|---|---|---|---|
 Bitcoin BTC | $83,678 | -0.05% | $1681.2B |
 Ethereum ETH | $2,688 | +0.24% | $328.2B |
 BNB BNB | $769.89 | +1.28% | $102.5B |
 XRP XRP | $1.49 | -0.42% | $94.0B |
 Solana SOL | $118.27 | -0.93% | $69.5B |
 Dogecoin DOGE | $0.0945 | +0.35% | $14.8B |
 Cardano ADA | $0.248 | +0.72% | $9.3B |
Live data: CoinGecko — 2026-09-30 23:21 UTC
