Chainalysis Attributes $387 Million Bitget Exchange Breach to North Korean Hackers
Blockchain analytics firm Chainalysis concluded that North Korean operatives executed the September hack of Bitget, pushing the country's annual crypto theft total past $1 billion.
Blockchain tracing firm Chainalysis published findings attributing the September 24 exploit of the Bitget cryptocurrency exchange to actors affiliated with North Korea. The $387 million breach lifts estimated crypto thefts linked to Pyongyang beyond $1 billion for 2026, aligning with prior assessments shared by Bitget leadership and security firm Elliptic.
According to the analysis, the stolen funds were dispersed within three hours across 23 individual transactions spanning four distinct blockchains. Ethereum received 49.7% of the diverted assets, XRP accounted for 40.8%, Zcash took 7.6%, and Tron absorbed 1.8%. The attackers subsequently deployed cross-chain liquidity networks, instant exchange tools, and mixing services to mask the transaction trail.
A significant portion of the stolen XRP was routed through cross-chain liquidity infrastructure to acquire Bitcoin, which was moved over roughly 36 hours into designated attacker addresses that remain under surveillance. Chainalysis reported that it utilized proprietary artificial intelligence tools to accelerate the investigation, reducing bridge tracking procedures that typically require over 20 hours to under 10 minutes.
These two are not the same thing, and one does not produce the other. The left is how this single article reads, from its tone alone. The right is the site’s own call on the asset, from indicators and analysis. Press tone feeds no score and no signal: on the only corpus this site has measured, daily tone tracked the move that had already happened and showed no measurable link with what followed.
More on Bitcoin All pieces →
- Neutral Hyperliquid launches yield-funded HYPE buybacks as large holder moves tokens
- Neutral SEC clears listing rule for first 3x leveraged Bitcoin and Ether ETPs
- Sell Macro warning highlights Bitcoin downside risks as Bitcoin Cash gains ground
- Neutral Aave tests $176 support as cumulative protocol deposits approach $4 trillion
Rewritten from the headline, the teaser and the one-line summary the qualification step produced — that is all the material there is, and nothing is added to it. The source link is kept on file so any item can be checked, and is not published here.