MistTrack: Bitget-linked DAI still flows to Tron via USDT0 as freezes stay near $318K

By Crypto Wire
October 1, 2026

MistTrack says a Bitget-linked address was still moving stolen stablecoin proceeds early October 1. SlowMist’s on-chain unit posted at 01:37 UTC that an address it ties to the ~$387.5 million Bitget exploiter swapped DAI on Ethereum, bridged through USDT0, and kept converting on Tron—ongoing laundering of existing loot, not a fresh drain. That is today’s Rug Room update on the Bitget ↔ Wasabi trail after AMLBot’s CoinJoin hop (9802) and NEAR Intents’ SHIELD block (10236), not another Protection Fund reopen wrap (10365). Primary desk reads from The Crypto Times and Blockchain.News attributing MistTrack.

What MistTrack flagged in the hop. One transaction swapped 100,000 DAI for about 100,034.89 USDT on Uniswap. The USDT then moved through USDT0, Tether’s Omnichain Fungible Token bridge path—MistTrack named the Ethereum-side OFT contract 0x1f748c76de468e9d11bd340fa9d5cbadf315dfb0 and the Tron-side contract 0x3a08f76772e200653bb55c2a92998daca62e0e97. On Tron, SunSwap activity converted about 90,967 USDT into USDD and about 19,000 USDT into TRX, totaling about 109,967 USDT on that side—larger than the single Uniswap print, which fits MistTrack’s “repeated flow” framing. Attribute every figure to MistTrack via those wraps; do not invent that the entire $387.5 million haul is now on Tron.

How this sits beside Wasabi and freezes. AMLBot’s earlier path put roughly 4 BTC into a Wasabi CoinJoin round after TRX→USDT→USDT0→ETH→THORChain hops—the chapter already on 9802. Separately, Circle and Tether freezes on the wallet Etherscan labels “Bitget Exploiter 8” still total about $318,000 (~99,990 USDC plus ~218,023 USDT), roughly 0.08% of Bitget’s disclosed loss and about 0.4% of the ~$75.5 million in USDT/USDC/USDT0 taken. Blocksec’s September 30 laundering note said those freezable stables were swapped into ETH or AVAX within 41 minutes of leaving Bitget, which is why little issuer-freezable value remained for later blacklists.



Recovery rails stay thin while the trail hops. NEAR Intents said it rejected more than $50 million in attempted swaps but froze only about $503,000 (10236). THORChain still declines Bitget’s refuse-service ask as permissionless. Bitquery’s late-September maps emptied most of the early XRP pile and left one wallet holding 10,000 ETH that had not sent as of September 29—watch whether that stack moves. Bitget’s own reopen clock remains clear: remaining tokens, fiat, and P2P are scheduled for 08:00 UTC October 2 after BTC/ETH/USDT phases already live.

What this tick is not. It is not MetaMask’s residual-validator math (10427), not the UK FCA authorisation gateway (10432), and not a claim that Circle/Tether freezes now cover a material slice of the haul. Daily Crypto Brief draft 10376 stays untouched. Desk of the Day is already spent for October 1 on 10418—no DotD line. Do not invent that MistTrack proved a new theft, that SunSwap prints equal the full stolen DAI balance, or that Wasabi CoinJoin has absorbed the DAI→Tron flow.

What to watch on-chain next: whether MistTrack’s DAI→USDT0→Tron→SunSwap pattern keeps printing after the October 1 note, whether Bitquery’s dormant 10,000 ETH wallet finally moves, and whether Bitget’s October 2 final withdrawal phase opens on schedule while freezable stables stay near the ~$318k issuer lock.

Bottom line: MistTrack says a Bitget-linked address was still swapping DAI into USDT and bridging to Tron via USDT0 on October 1—ongoing laundering while issuer freezes remain near $318,000 and Bitget’s final reopen sits on October 2.

Disclaimer: This article is provided for informational and educational purposes only. It does not constitute financial, investment, legal, or trading advice. The NFT market is highly volatile, and past performance is not indicative of future results. Readers should conduct their own research and consult qualified professionals before making any decisions related to digital assets. The cover image for this article may have been created using artificial intelligence (AI).

8bitcrypto NewsDesk

Crypto Wire — she runs the default news desk from Los Angeles. Market tape, NFT drops, and policy wires filed fast with zero shill. Your straight signal from 8bitcrypto.

Leave a Reply

Discover more from 8bitcrypto

Subscribe now to keep reading and get access to the full archive.

Continue reading