Ethereum
Chainalysis Traces $387M Bitget Exploit Across Ethereum and Other Blockchains to DPRK
An investigation by Chainalysis links the September Bitget theft to North Korea, noting that nearly half of the stolen funds initially moved onto Ethereum.
Chainalysis reported that North Korea-linked threat groups were responsible for the $387 million breach of crypto exchange Bitget on September 24. The incident pushed the total estimated volume of digital assets stolen by North Korean state-backed hackers above $1 billion during 2026.
Investigators observed that the perpetrators rapidly divided the stolen capital across multiple chains in the first three hours following the intrusion. Ethereum received the largest share at 49.7%, followed by XRP at 40.8%, Zcash at 7.6%, and Tron at 1.8%. The attackers then engaged cross-chain messaging mechanisms and swap services to obfuscate transaction histories.
Chainalysis stated that it used automated in-house artificial intelligence systems to reconstruct cross-chain bridges and trace addresses in under 10 minutes, assisting law enforcement and Bitget in monitoring addresses where funds, including converted Bitcoin, were deposited.
These two are not the same thing, and one does not produce the other. The left is how this single article reads, from its tone alone. The right is the site’s own call on the asset, from indicators and analysis. Press tone feeds no score and no signal: on the only corpus this site has measured, daily tone tracked the move that had already happened and showed no measurable link with what followed.
More on Ethereum All pieces →
- Sell ConsenSys confirms MetaMask wallet funds are unaffected following security incident
- Neutral SEC approves Cboe BZX rule change for 3x leveraged Ether and Bitcoin ETPs
- Neutral Leading crypto assets exhibit correlation range of 0.82 to 0.90 over twelve months
- Sell US Spot Ethereum ETFs Record $118 Million in Outflows Across Three Sessions
Rewritten from the headline, the teaser and the one-line summary the qualification step produced — that is all the material there is, and nothing is added to it. The source link is kept on file so any item can be checked, and is not published here.
