Skip to content
North Korea-Linked Hackers Steal $387 Million from Bitget Using AI for Fund Tracing

North Korea-Linked Hackers Steal $387 Million from Bitget Using AI for Fund Tracing

First seen 4 Oct 2026, 04:08 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 4, 2026 at 06:06 UTC
  • •North Korean hackers stole $387 million from Bitget on September 24, 2026.
  • •Chainalysis used AI to trace funds, reducing investigation time from over 20 hours to under 10 minutes.
  • •The total crypto theft attributed to North Korea in 2026 exceeds $1 billion.

On September 24, 2026, hackers attributed to North Korea stole $387 million from the Bitget crypto exchange. The funds were rapidly transferred across multiple blockchains, primarily Ethereum and XRP, using complex laundering techniques to obscure their trail. Chainalysis utilized in-house AI to trace the stolen funds, compressing over 20 hours of manual reconciliation into under 10 minutes. The investigation revealed that the stolen assets were moved through cross-chain liquidity protocols and instant swaps, complicating tracking efforts. The total value of cryptocurrency stolen by North Korean actors in 2026 has now surpassed $1 billion. Chainalysis continues to monitor the identified addresses and track the movement of the stolen funds. The speed and sophistication of the operation highlight ongoing risks from state-sponsored cyber theft in the crypto sector.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-09-24
Bitget hack occurs
$387 million was stolen from Bitget, with funds quickly transferred across multiple blockchains.
Chainalysis
2026-10-01
Chainalysis report published
Chainalysis released a report detailing the hack and tracing efforts, attributing it to North Korean actors.
Chainalysis
2026-10-03
Media coverage expands
Multiple outlets report on the Chainalysis findings, confirming the North Korean attribution and detailing tracing methods.
Crypto.News

More articles in this cluster (7)

Following this threat?

Track Bitget in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (9)

1 / 2

Common questions

What methods were used to steal the funds?
The attackers used sophisticated laundering techniques, moving funds through multiple blockchains and liquidity protocols.
How much cryptocurrency has been stolen by North Korea in 2026?
The total value of cryptocurrency stolen by North Korean actors in 2026 has surpassed $1 billion.
What is Chainalysis doing about the stolen funds?
Chainalysis is actively monitoring the identified addresses and tracing the movement of the stolen funds.