Blockchain security firm SlowMist reported on September 30, 2026 that suspected North Korean hackers are moving assets stolen from Bitget through the cross-chain swap protocol Chainflip and the decentralized exchange aggregator CoW Protocol. The finding, shared by researcher and journalist Colin Wu, traces the next leg of a laundering operation that began after Bitget confirmed more than $350 million was stolen in one of the largest exchange breaches of the year.
The choice of routing tools is the story. Rather than cashing out through a centralized venue where an account can be frozen, the attackers are pushing funds through infrastructure that has no single operator able to hit pause.
The routing choice tells you the goal
Chainflip is a native cross-chain protocol that swaps assets directly between blockchains without wrapping them or passing through a custodial bridge. CoW Protocol batches trades and settles them through a network of independent solvers rather than a central order book. Both are built to run without a gatekeeper. That is a feature for ordinary users and a shield for anyone trying to move tainted coins.
For a laundering operation, the appeal is straightforward. Cross-chain swaps break the on-chain trail every time value hops from one ledger to another, forcing investigators to re-acquire the thread on a new chain. Aggregators and batch settlement blur which input funded which output. String enough of these together and a clean linear trace turns into a branching map that takes days of manual work to reconstruct, if it can be reconstructed at all.
A pattern investigators have seen before
The technique matches what forensic firms have long attributed to North Korea-linked groups: rapid splitting of stolen funds, layered swaps across multiple protocols, and a preference for non-custodial rails that resist freezes. Speed matters because the window to move funds closes as exchanges, stablecoin issuers, and protocol communities coordinate blacklists.
That coordination is exactly where the Bitget case has already run into limits. When Bitget asked the community to block the stolen assets, THORChain's validators rejected the call to freeze the funds, citing the network's neutrality and the precedent that intervening would set. The refusal underscored a hard truth about decentralized infrastructure: the same censorship resistance that protects legitimate users also protects the people this design was never meant to help.
Stablecoin issuers can still freeze
Not every rail is unfreezable. Stablecoin issuers retain the ability to blacklist addresses on their own tokens, and they use it. Tether alone has frozen hundreds of millions in flagged USDT this year, and a laundering flow that touches a freezable stablecoin at any point exposes itself to that control. The attackers' reliance on native cross-chain swaps and decentralized aggregators is a deliberate way to stay clear of those chokepoints for as long as possible.
The gap between the two worlds defines the current state of exchange security. Centralized issuers and platforms can act, but only over assets they control. Decentralized protocols can trace nothing back and freeze nothing by design. Stolen funds flow toward whichever side offers the least friction, and right now that is the non-custodial side.
The custody lesson for everyday users
The mechanics of a state-linked laundering operation may feel far removed from someone using a crypto card for groceries, but the underlying lesson is the same one that governs every custodial relationship. When assets sit on an exchange, they are the exchange's liability and the exchange's target. A breach the size of Bitget's does not just cost the platform; it freezes withdrawals, strains reserves, and leaves customers waiting for phased restarts.
Users who want to reduce that counterparty exposure increasingly look at cards that spend from a wallet they control rather than from a pooled exchange balance. Self-custody does not make you immune to phishing or contract exploits, and it shifts the burden of key management onto you. What it removes is the single-point failure where one exchange breach puts every customer's balance in the same blast radius. For funds you are not actively trading, holding less on any centralized venue is the simplest way to shrink the target.
Overview
SlowMist has tied the next stage of the Bitget theft to Chainflip and CoW Protocol, decentralized routing tools that let suspected North Korean hackers swap across chains and blur the trail without touching a freezable chokepoint. The move fits a long-documented laundering pattern and follows THORChain's earlier refusal to block the funds, highlighting how censorship-resistant infrastructure cuts both ways. Freezes still bite where issuers control the asset, as Tether's blacklists show, but native cross-chain swaps are engineered to avoid exactly those points. For ordinary users, the durable takeaway is about counterparty risk: assets left on an exchange share its blast radius, and reducing custodial exposure remains the most reliable defense.
