Deep Tide TechFlow updates: On September 30, according to monitoring by MistTrack, the MistTrack tracking system showed that for stolen funds from the Bitget platform, North Korean hackers are using an automated cross-chain laundering route combining the “CoW Protocol” with Chainflip.
On-chain analysis indicates that the hackers create swap orders on the CoW Protocol via automated scripts, and set the order’s receiving address directly to a preconfigured Chainflip top-up contract address. Once the order is filled, the funds are transferred to complete the cross-chain exchange via Chainflip, ultimately being converted to Bitcoin (BTC) and sent to the target address.
On-chain analysis indicates that the hackers create swap orders on the CoW Protocol via automated scripts, and set the order’s receiving address directly to a preconfigured Chainflip top-up contract address. Once the order is filled, the funds are transferred to complete the cross-chain exchange via Chainflip, ultimately being converted to Bitcoin (BTC) and sent to the target address.