Bitget hacker wallets move 1,052 BTC in six days, most into CoinJoin

The scale of CoinJoin usage here is the story: routing the majority of moved coins through mixing suggests a deliberate effort to break on-chain linkage rather than a hurried cash-out, which complicates attribution and recovery for exchange and law enforcement tracing teams. That a substantial balance remains unmoved also implies the process is ongoing rather than complete. The open question is whether the remaining holdings follow the same mixing path, and whether exchange compliance teams can flag tainted flows before they reach conversion points.