On-chain investigators have linked funds from the Bitget, Cryptobills Ledger and Triple-A incidents to transfers into Zcash (ZEC). ZachXBT said wallets allegedly associated with North Korean attackers deposited about 2,700 ZEC, valued at $3.8 million at the time, into the Ironwood pool after the September 24 Bitget hot-wallet theft, estimated at $28.3 million. Specter later identified reported Zcash movements tied to the Cryptobills Ledger incident and the $12 million Triple-A hack, though amounts and transaction references for those cases were not disclosed. The reported deposits identify potential movement routes, but the total sent into ZEC, final destinations, recoveries and traceability of the specific funds remain unconfirmed.