North Korean Hackers Steal $387.5 Million from Bitget Crypto Exchange
Bitget, a cryptocurrency exchange based in the Seychelles, suffered one of the largest hacks of 2026, with attackers making off with approximately $387.5 million worth of assets on September 24.
The stolen funds included XRP ($157 million), ETH, USDT, USDC, ZEC, BNB, AVAX, and TRX, spread across various networks such as Ethereum, the XRP Ledger, Zcash, and TRON.
Investigators linked the breach to a zero-day exploit in a third-party security product that Bitget had been using for several weeks. This vulnerability allowed attackers to manipulate transaction data and trick the exchange's internal approval process without ever touching cold storage or private keys.
The stolen Zcash was laundered through Zcash's Ironwood shielded pool, making it effectively untraceable on the public ledger.