https://x.com/YFarmX/status/2104218299953193442
BITGET $390M HACK 🧵 We traced the stolen Zcash out of the private pool.
The attacker took 8 pieces of Bitget's stolen Zcash, 246.74 ZEC ($406.7k), and hid them in Zcash's private pool, where who pays whom is hidden.
Every piece came back out the same way: swapped to Bitcoin through NEAR Intents, from @zodl_app, the Zcash phone wallet formerly called Zashi. That matches the phone-wallet fingerprint we flagged on every shield.
The swap service keeps a public record of each swap: the Zcash transaction in, the Bitcoin address out. 4.77 BTC ($404.5k) came out to 10 Bitcoin addresses. 7 of them are missing from Bitget's attacker list.
Also, I confirmed with Yfarm that they aren't even requesting metadata from Near, and instead can do this all on their own:
https://x.com/YFarmX/status/2109922330822471987
We monitor and analyse swap metadata entirely independently. NEAR hasn't provided us with any metadata or transaction information.
It's actually the other way around. We share our findings with NEAR's SHIELD initiative to support their efforts.