Bloom Attacker Moved Funds Through 2,152 Addresses, Including Zcash Privacy Pool

The scale of the address sprawl — thousands of intermediaries across Solana, EVM chains and Zcash — suggests the laundering playbook is now routine rather than bespoke, which matters more for tracing firms and exchanges than for the stolen sum itself. The Zcash shielded-pool leg is the notable wrinkle: privacy assets remain a favored exit ramp despite the compliance attention they draw. Whether cross-chain privacy hops like this become standard in smaller exploits, and how quickly analytics teams adapt, is the open question.