SlowMist: Suspected North Korean Hackers Route Stolen Bitget Funds Through CoW, Chainflip

SlowMist founder Cos said MistTrack’s TrackAgent detected suspected North Korean hackers moving funds stolen from Bitget through a combination of CoW Protocol and Chainflip. According to the analysis, automated scripts create CoW orders with pre-generated Chainflip deposit contracts as recipient addresses, allowing settled assets to move directly into cross-chain swaps and ultimately be converted into BTC, making the fund trail harder to follow. North Korean-linked actors are currently suspected in the roughly $350 million Bitget hack, though attribution remains under investigation.