Stolen funds tied to Bitget and two other security incidents are being moved into Zcash, investigator says

Stolen funds tied to Bitget and two other security incidents are being moved into Zcash, investigator says

N
News Editor
2026-10-18 07:48:15
On-chain investigator Specter said funds linked to three separate security incidents involving Bitget, Cryptobills Ledger, and Triple-A are being transferred into privacy coin Zcash. The disclosure adds to earlier tracing work by ZachXBT, who had already identified roughly 2,700 ZEC flowing into Zcash’s Ironwood privacy pool after Bitget’s September hack, worth about $3.8 million at the time. In an Oct. 17 post on X, Specter said funds from the Cryptobills Ledger incident and the $12 million Triple-A exploit had also entered Zcash, though no full transaction paths or exact amounts were disclosed. Bitget had previously confirmed that about $387.5 million from its Sept. 24 security incident moved to addresses controlled by the attacker. Zcash activated Ironwood in July 2026, creating a new privacy pool. Investigators can detect deposits into that pool, but tracking funds after that point is much harder.

On-chain investigator Specter said stolen funds tied to three separate security incidents involving Bitget, Cryptobills Ledger, and Triple-A are being moved into privacy coin Zcash (ZEC).

The finding follows earlier tracing by investigator ZachXBT, who tracked about 2,700 ZEC into Zcash’s Ironwood privacy pool after Bitget was hacked in September. Those funds were worth about $3.8 million at the time.

In an Oct. 17 post on X, Specter said funds from the Cryptobills Ledger incident and the Triple-A exploit, which involved $12 million, had also entered Zcash. Specter did not disclose the full transaction routes or the exact amounts involved.

Bitget had previously confirmed that about $387.5 million from its Sept. 24 security incident flowed to addresses controlled by the attacker.

Zcash activated Ironwood in July 2026, creating a new privacy pool. Investigators can identify when funds are deposited into the pool, but tracing where they go afterward is difficult.

This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan.
300

Disclaimer:

The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.

Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.