On-chain investigator ZachXBT named five aliases he says are linked to intermediaries laundering funds stolen in Bitget's September 24, 2026 breach, including operators who publicly sought help from customer-support teams at cross-chain protocols and bridge services. A wallet linked by Lookonchain to the attacker swapped about 2,390 ETH, worth roughly $6.3 million, for 75.2 BTC through 27 successful THORChain transactions, while four further swaps totaling 400 ETH remained pending. Bitget has estimated its loss at approximately $387.5 million, and THORChain has declined requests to selectively block publicly identified attacker-linked addresses, saying its emergency halts are protocol-security tools rather than wallet-freezing mechanisms. The identities, attribution and transaction links have not been independently verified, and no government has formally attributed the Bitget hack.