Home›Crypto›Market Structure›Chainalysis links $387M Bitget hack to North Korea-lin…

Chainalysis links $387M Bitget hack to North Korea-linked actors

Chainalysis said the Sept. 24 breach pushed North Korea-linked groups' 2026 crypto thefts past $1.0 billion, with $387 million leaving Bitget within three hours across four blockchains.

Reported · Written up by our desk · Market Structure

Blockchain analytics firm Chainalysis attributed last month's $387 million Bitget exchange hack to North Korea-linked actors, adding to a broader assessment that Pyongyang was behind one of the year's largest crypto thefts.

In a report published Wednesday, Chainalysis said the Sept. 24 breach drove North Korea-linked groups' total value of stolen crypto in 2026 past $1.0 billion, and described work with Bitget and law enforcement to trace the funds across multiple blockchains.

Chainalysis said $387 million left Bitget in the first three hours through 23 transfers, landing on Ethereum, which received nearly half at 49.7%, then XRP at 40.8%, Zcash at 7.6%, and Tron at 1.8%.

The firm also described how the attackers moved the funds using cross-chain liquidity and messaging protocols, instant swaps, and laundering services to obscure the trail, noting that the stolen XRP was routed through a cross-chain liquidity protocol rather than sent to an exchange.

Latest closeXRP $1.335 ▼2.2%

More like this

Sources